GRC Consultant – Compliance & Audit Readiness
Sprinto is an Autonomous Trust Platform that centralizes trust requirements across security frameworks, vendors, and customers.
Sprinto autonomously executes tasks needed to maintain trust across compliance, audits, risk management, vendor risk, privacy, and AI governance, enabling organizations to maintain a strong, reliable trust posture without draining operational bandwidth and resources on repetitive tasks.
Backed by top-tier investors such as Accel, Elevation, and Blume Ventures, we’ve raised $31.8M in funding to fuel our mission. Trusted by over 4,000 organizations across 75 countries , Sprinto helps organizations stay audit-ready, manage real-time risks, and scale fearlessly. With 300+ native integrations and AI-driven automation, Sprinto supports 200+ global security standards natively , including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and more. Sprinto 's extensible architecture enables organizations to build and support an infinite number of custom integrations and frameworks.
Founded in 2020 by second-time founders Girish Redekar and Raghuveer Kancherla, Sprinto powers compliance for organizations like Whatfix, Encora, Anaconda, Whatnot, Ultrahuman, WeWork, Everstage, AI Foundation, HackerRank, and many more.
Life as a Sprinter -
Nobody succeeds at Sprinto by staying in their lane.
We are organised around problems, not job titles. Sprinters take ownership beyond their role, solve hard problems, and care deeply about the impact they create. If something can be improved, fixed, or built, we don't wait for permission; we step in.
Being remote means we rely less on proximity and more on trust. We write things down, communicate openly, and move quickly because great teams aren't built by sitting together; they're built by pulling in the same direction.
We believe progress beats perfection, feedback is a gift, and doing the right thing matters, even when nobody is watching.
And while we move with urgency, we never move alone.
The mission -
Act as the trusted bridge between customers and independent auditors. You will identify security and compliance gaps, drive practical remediation, strengthen evidence readiness, and guide customers through external audits to timely closure without compromising auditor independence.
Where you'll leave your mark?
-
Own the audit journey for an assigned portfolio of global customers - from gap assessment and readiness through external audit fieldwork, findings resolution and closure.
-
Assess security controls, cloud environments, organizational policies and operating practices to identify control, evidence and implementation gaps early.
-
Turn identified gaps into practical, risk-based remediation plans with Engineering, IT, DevOps and leadership teams, balancing audit urgency with operational reality.
-
Review evidence for relevance, completeness and consistency before submission, and maintain a clear, audit-ready trail of requests, responses and decisions.
-
Serve as the coordination point between customers and independent auditors - facilitate requests, clarify how controls operate and help teams respond accurately without compromising auditor independence.
-
Track open evidence requests, dependencies, exceptions and delivery risks; communicate progress clearly and escalate roadblocks before they threaten timelines.
-
Guide customers across SOC 2 Type I and Type II examinations and ISO/IEC 27001 audits, with exposure to ISO/IEC 27701, HIPAA, GDPR and PCI DSS where relevant.
-
Work flexibly across EU and US hours to support international customers and audit firms during time-sensitive stages of an engagement.
-
Improve reusable playbooks, evidence guidance and audit workflows by turning recurring issues into scalable practices for the Central Audits Team.
The kind of builder we're looking for -
-
2-5 years of relevant experience in information security, IT audit, compliance consulting or a closely related customer-facing ad