Sprinto

2 weeks ago

Senior GRC Consultant — Federal & Complex Frameworks

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 9 hours agoStatus: Live

Job Summary

Own delivery for federal and complex compliance engagements where customer regulatory standing is on the line. Lead FedRAMP readiness/authorization support, CMMC L1–L3 assessments and remediation, HITRUST r2 preparation, and NIST 800-53/800-171 and NIST CSF work. Build reusable control-mapping libraries, SSP/POA&M templates, and evidence playbooks, provide pre-sales technical validation, and define pricing, margin, and capacity for a harder-to-backfill book of business.

Location: India

Workplace: Remote

Employment Type: Full time

Job Function: Government Affairs & Public Policy

Seniority: Mid level

Key Responsibilities

•Lead delivery of FedRAMP readiness/authorization support, CMMC L1–3 assessments and gap remediation, HITRUST r2 validated assessment preparation, and NIST 800-53/800-171 control implementation and SSP development, plus NIST CSF maturity assessments.
•Provide pre-sales technical validation on federal/complex opportunities, including scoping rigor before contract.
•Build and maintain control-mapping libraries, SSP templates, POA&M templates, and evidence-collection playbooks calibrated to federal framework depth.
•Track framework revisions (e.g., NIST 800-53 Rev 6, CMMC rule finalization, FedRAMP 20x) and translate changes into playbook updates.
•Define pricing and own margin/utilization for federal/complex engagements, including forecasting capacity for the specialized skillset.

Pay and Benefits

Perks:Remote WorkHealth InsuranceLife InsuranceLearning Budget

Key Requirements

•5+ years in federal/defense-adjacent compliance consulting, or experience as an ISSO/ISSM, FedRAMP 3PAO assessor, or CMMC C3PAO assessor.
•Have taken systems through an actual ATO, FedRAMP authorization, or CMMC certification (advisory-only experience isn’t sufficient).
•Domain mastery across FedRAMP (Moderate/High), CMMC L1–L3, HITRUST r2, NIST 800-53, NIST 800-171, and NIST CSF.
•OSCAL/SSP structural familiarity is a plus.
•Demonstrated use of AI tools to reduce manual effort and standardize deliverables.

Experience:5+ yearsFederal complianceDefense-adjacentGRCFedRAMPCMMCHITRUSTNIST

Skills:Written communicationRegulatory judgmentQuality focusOwnershipMargin awareness

Certifications:CISSPCISACMMC-RPCMMC-CCAFedRAMP-recognized assessor trainingNIST 800-171 assessor certification

Tech Stack:FedRAMPCMMCHITRUST r2NIST 800-53NIST 800-171NIST CSFOSCALSSPPOA&MNIST 800-53 Rev 6

Company Brief

Sprinto

Provides automated compliance and security assurance platform to help SaaS companies achieve and maintain certifications like SOC 2, ISO 27001, and GDPR through continuous evidence collection, control orchestration, and audit readiness.

Industry: RegTech

Company Size: Medium (51 to 250 employees)

Growth: Growth Stage Startup

Headquarters: Mumbai, India

Founded: 2019

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Sprinto

2 weeks ago

Senior GRC Consultant — Federal & Complex Frameworks

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 9 hours agoStatus: Live

Job Summary

Location: India

Workplace: Remote

Employment Type: Full time

Job Function: Government Affairs & Public Policy

Seniority: Mid level

Key Responsibilities

•Lead delivery of FedRAMP readiness/authorization support, CMMC L1–3 assessments and gap remediation, HITRUST r2 validated assessment preparation, and NIST 800-53/800-171 control implementation and SSP development, plus NIST CSF maturity assessments.
•Provide pre-sales technical validation on federal/complex opportunities, including scoping rigor before contract.
•Build and maintain control-mapping libraries, SSP templates, POA&M templates, and evidence-collection playbooks calibrated to federal framework depth.
•Track framework revisions (e.g., NIST 800-53 Rev 6, CMMC rule finalization, FedRAMP 20x) and translate changes into playbook updates.
•Define pricing and own margin/utilization for federal/complex engagements, including forecasting capacity for the specialized skillset.

Pay and Benefits

Perks:Remote WorkHealth InsuranceLife InsuranceLearning Budget

Key Requirements

•5+ years in federal/defense-adjacent compliance consulting, or experience as an ISSO/ISSM, FedRAMP 3PAO assessor, or CMMC C3PAO assessor.
•Have taken systems through an actual ATO, FedRAMP authorization, or CMMC certification (advisory-only experience isn’t sufficient).
•Domain mastery across FedRAMP (Moderate/High), CMMC L1–L3, HITRUST r2, NIST 800-53, NIST 800-171, and NIST CSF.
•OSCAL/SSP structural familiarity is a plus.
•Demonstrated use of AI tools to reduce manual effort and standardize deliverables.

Experience:5+ yearsFederal complianceDefense-adjacentGRCFedRAMPCMMCHITRUSTNIST

Skills:Written communicationRegulatory judgmentQuality focusOwnershipMargin awareness

Certifications:CISSPCISACMMC-RPCMMC-CCAFedRAMP-recognized assessor trainingNIST 800-171 assessor certification

Tech Stack:FedRAMPCMMCHITRUST r2NIST 800-53NIST 800-171NIST CSFOSCALSSPPOA&MNIST 800-53 Rev 6

Company Brief

Sprinto

Industry: RegTech

Company Size: Medium (51 to 250 employees)

Growth: Growth Stage Startup

Headquarters: Mumbai, India

Founded: 2019

Website LinkedIn