Senior GRC Consultant — Federal & Complex Frameworks

Sprinto is an Autonomous Trust Platform that centralizes trust requirements across security frameworks, vendors, and customers.
Sprinto autonomously executes tasks needed to maintain trust across compliance, audits, risk management, vendor risk, privacy, and AI governance, enabling organizations to maintain a strong, reliable trust posture without draining operational bandwidth and resources on repetitive tasks.
Backed by top-tier investors such as Accel, Elevation, and Blume Ventures, we’ve raised$31.8M in funding to fuel our mission. Trusted by over 3,000 organizations across 75 countries, Sprinto helps organizations stay audit-ready, manage real-time risks, and scale fearlessly. With 300+ native integrations and AI-driven automation, Sprinto supports 200+ global security standards natively, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and more. Sprinto's extensible architecture enables organizations to build and support an infinite number of custom integrations and frameworks.
Founded in 2020 by second-time founders Girish Redekar and Raghuveer Kancherla, Sprinto powers compliance for organizations like Whatfix, Encora, Anaconda, Whatnot, Ultrahuman, WeWork, Everstage, AI Foundation, HackerRank, and many more.
Life as a Sprinter : 
Nobody succeeds at Sprinto by staying in their lane.
We are organized around problems, not job titles. Sprinters take ownership beyond their role, solve hard problems, and care deeply about the impact they create. If something can be improved, fixed, or built, we don't wait for permission; we step in.
Being remote means we rely less on proximity and more on trust. We write things down, communicate openly, and move quickly because great teams aren't built by sitting together, they're built by pulling in the same direction.
We believe progress beats perfection, feedback is a gift, and doing the right thing matters, even when nobody is watching.
And while we move with urgency, we never move alone.
The mission of this role : 
Driving information security, third-party risk, and privacy outcomes is a team sport. Behind every certification a Sprinto customer achieves, there's a professional services firm — a VAPT provider, an audit and assurance firm, a vCISO practice, a law firm — that plays a critical role in the outcome. Sprinto is investing in treating these delivery partners as first-class stakeholders in the customer journey, and building this into a structured channel that generates predictable revenue growth for the business.
This is a founding role. You will build the Delivery Partnerships function from the ground up — designing the program, building the partner portfolio, and establishing how Sprinto engages with the professional services ecosystem at scale. You will have the mandate, the internal support, and the greenfield opportunity to define what this function becomes.

Where you'll Leave Your Mark / Things You'll Build: Deliver Lead delivery of FedRAMP readiness/authorization support, CMMC Level 1–3 assessments and gap remediation, HITRUST r2 validated assessment preparation, NIST 800-53/800-171 control implementation and SSP development, and NIST CSF maturity assessments. Provide pre-sales technical validation on federal/complex opportunities — these deals typically need scoping rigor before contract that standard-framework deals don't. Build reusable IP Build and maintain control-mapping libraries, SSP templates, POA&M templates, and evidence-collection playbooks calibrated to the depth federal frameworks require. Track framework revisions (NIST 800-53 Rev 6, CMMC rule finalization, FedRAMP 20x, etc.) and translate changes into playbook updates promptly — these frameworks move on regulatory timelines, not product timelines. Own commercial outcomes Define pricing for federal/complex engagements, reflecting higher complexity and duration than standard-framework work. Own margin and utilization on your engagement book; forecast capacity against a specialized, harder-to-backfill skil