The posting
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior GRC Consultant - Contract based in India.
This is a hands-on consulting role focused on delivering and scaling Governance, Risk, and Compliance programs for a diverse portfolio of clients. You will own multiple concurrent engagements across leading security and privacy frameworks, including ISO 27001, SOC 2, and GDPR. The role combines client delivery, advisory expertise, commercial ownership, and the development of reusable GRC methodologies. You will help mature and standardize delivery practices while ensuring high-quality, audit-ready outcomes. You will also use AI-enabled workflows to streamline assessments, control mapping, documentation, and quality assurance. This is an opportunity for an experienced GRC professional who thrives in a high-autonomy, remote environment and enjoys turning complex compliance requirements into practical solutions.
Accountabilities
- Own end-to-end delivery for standard-framework engagements, including ISO 27001 implementation and surveillance, SOC 2 Type I/II readiness, GDPR programs, PCI DSS compliance, gap assessments, control mapping, internal audits, policy reviews, and audit-readiness support.
- Manage multiple concurrent client engagements independently while maintaining consistent quality, timelines, and client satisfaction.
- Maintain and continuously improve reusable GRC assets, including templates, control-mapping libraries, workshop agendas, delivery playbooks, and quality-assurance rubrics.
- Keep methodologies and supporting materials aligned with evolving regulatory and framework requirements, including updates to ISO 27001, SOC 2, and GDPR guidance.
- Expand reusable frameworks and methodologies into adjacent areas such as HIPAA, PCI DSS, and ISO 42001 as client demand develops.
- Contribute to commercial outcomes by defining pricing and packaging models for standard-framework services, including fixed-fee and retainer options.
- Manage utilization, delivery forecasting, and margins across assigned engagements while supporting sustainable client relationships.
- Partner with Sales, Solution Engineering, and Customer Success teams to support deal conversion, service attachment, renewals, and technical validation.
- Develop and maintain AI-assisted workflows for gap assessments, control mapping, internal audit checklists, and other recurring GRC activities.
- Establish structured inputs, validation processes, quality controls, and human approval checkpoints to ensure AI-assisted deliverables remain accurate and reliable.
- Define acceptance criteria and review checkpoints for client deliverables, identify scope creep early, and escalate ambiguous liability or risk issues appropriately.
- Track delivery performance through metrics such as utilization, gross margin, QA pass rates, rework, delivery cycle time, customer satisfaction, service attachment, and playbook reuse.
- 5+ years of experience in GRC, security consulting, risk, compliance, or ownership of an internal compliance program.
- Proven hands-on delivery experience across ISO 27001, SOC 2 Type I/II, and GDPR.
- Strong working knowledge of compliance frameworks, controls, risk management, audit preparation, policy development, and regulatory requirements.
- Experience managing several client engagements simultaneously while working independently and maintaining a consistently high delivery standard.
- Demonstrated ability to use AI tools to reduce manual work, improve consistency, and accelerate GRC deliverables.
- Ability to translate subject-matter expertise into reusable templates, playbooks, guided workflows, and structured systems.
- Strong commercial awareness, with the ability to manage pricing, packaging, utilization, margins, and delivery forecasting for an assigned portfolio.
- Excellent written and verbal communication skills, with confidence facilitating client workshops and presenting recommendations independently.
- Strong judgment and problem-solving skills, particularly when navigating ambiguity, scope changes, and complex compliance questions.
- Ability to identify potential risks early, establish appropriate quality controls, and escalate issues when necessary.
- Working knowledge of PCI DSS, HIPAA, ISO 42001, or related frameworks is an advantage.
- Certifications such as ISO 27001 Lead Auditor/Lead Implementer, CISA, or CISM are preferred.
- This is a six-month contract position and candidates should be available to join immediately.
- Comfortable working remotely with a high degree of ownership, written communication, collaboration, and accountability.
- Fully remote working arrangement within India.
- Six-month contract opportunity with the potential to make an immediate impact.
- High degree of autonomy and ownership over client engagements and delivery outcomes.
- Opportunity to work across multiple international GRC and compliance engagements.
- Exposure to leading frameworks including ISO 27001, SOC 2, GDPR, PCI DSS, HIPAA, and ISO 42001.
- Opportunity to develop expertise in AI-enabled GRC workflows and compliance productization.
- Ability to build reusable methodologies, playbooks, and intellectual property that can influence future delivery at scale.
- Opportunity to contribute to commercial strategy through pricing, packaging, utilization, and margin ownership.
- Collaborative remote environment focused on trust, transparency, continuous improvement, and knowledge sharing.
- Inclusive working culture that values talent, curiosity, ownership, diverse perspectives, and impact.
- Opportunity to work closely with Sales, Solution Engineering, Customer Success, and other cross-functional teams.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
