Senior GRC Consultant - Contract

Jobgether SRL; India; Remote; INR 1,674,000 - 2,344,000; Part time

Job summary

Jobgether SRL, on behalf of a partner company, seeks a Senior GRC Consultant for a six-month contract in India. This hands-on role delivers and scales governance, risk, and compliance programs across ISO 27001, SOC 2, GDPR, PCI DSS, and HIPAA, with AI-assisted workflows to accelerate assessments and documentation.

You will own multiple engagements, define pricing models, and collaborate with Sales and Customer Success to drive outcomes while maintaining high delivery quality and audit-ready

Qualifications

• 5+ years in GRC, security consulting, risk, or internal compliance ownership.
• Hands-on delivery across ISO 27001, SOC 2 Type I/II, and GDPR.
• Experience managing several client engagements independently.
• Demonstrated ability to use AI tools to reduce manual work and accelerate GRC deliverables.
• Certifications such as ISO 27001 Lead Auditor/Lead Implementer, CISA, or CISM preferred.
• Six-month contract position with immediate availability.
• Comfortable working remotely with high ownership and accountability.

Responsibilities

• Own end-to-end delivery for standard-framework engagements (ISO 27001, SOC 2, GDPR, PCI DSS).
• Manage multiple concurrent client engagements with quality and timeliness.
• Maintain and improve reusable GRC assets (templates, playbooks, control libraries).
• Ensure materials align with evolving regulatory guidance (ISO 27001, SOC 2, GDPR).
• Develop AI-assisted workflows for gap assessments and internal audits.
• Define acceptance criteria and review checkpoints for client deliverables.

Skills

GRC Delivery

ISO 27001

SOC 2

GDPR

AI Tools

Client Workshops

Education

ISO 27001 Lead Auditor

CISA

CISM

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior GRC Consultant - Contract based in India.

This is a hands-on consulting role focused on delivering and scaling Governance, Risk, and Compliance programs for a diverse portfolio of clients. You will own multiple concurrent engagements across leading security and privacy frameworks, including ISO 27001, SOC 2, and GDPR. The role combines client delivery, advisory expertise, commercial ownership, and the development of reusable GRC methodologies. You will help mature and standardize delivery practices while ensuring high-quality, audit-ready outcomes. You will also use AI-enabled workflows to streamline assessments, control mapping, documentation, and quality assurance. This is an opportunity for an experienced GRC professional who thrives in a high-autonomy, remote environment and enjoys turning complex compliance requirements into practical solutions.

• Own end-to-end delivery for standard-framework engagements, including ISO 27001 implementation and surveillance, SOC 2 Type I/II readiness, GDPR programs, PCI DSS compliance, gap assessments, control mapping, internal audits, policy reviews, and audit-readiness support.

• Manage multiple concurrent client engagements independently while maintaining consistent quality, timelines, and client satisfaction.

• Maintain and continuously improve reusable GRC assets, including templates, control-mapping libraries, workshop agendas, delivery playbooks, and quality-assurance rubrics.

• Keep methodologies and supporting materials aligned with evolving regulatory and framework requirements, including updates to ISO 27001, SOC 2, and GDPR guidance.

• Expand reusable frameworks and methodologies into adjacent areas such as HIPAA, PCI DSS, and ISO 42001 as client demand develops.

• Contribute to commercial outcomes by defining pricing and packaging models for standard-framework services, including fixed-fee and retainer options.

• Manage utilization, delivery forecasting, and margins across assigned engagements while supporting sustainable client relationships.

• Partner with Sales, Solution Engineering, and Customer Success teams to support deal conversion, service attachment, renewals, and technical validation.

• Develop and maintain AI-assisted workflows for gap assessments, control mapping, internal audit checklists, and other recurring GRC activities.

• Establish structured inputs, validation processes, quality controls, and human approval checkpoints to ensure AI-assisted deliverables remain accurate and reliable.

• Define acceptance criteria and review checkpoints for client deliverables, identify scope creep early, and elevate ambiguous liability or risk issues appropriately.

• Track delivery performance through metrics such as utilization, gross margin, QA pass rates, rework, delivery cycle time, customer satisfaction, service attachment, and playbook reuse.

Requirements

• 5+ years of experience in GRC, security consulting, risk, compliance, or ownership of an internal compliance program.

• Proven hands-on delivery experience across ISO 27001, SOC 2 Type I/II, and GDPR.

• Strong working knowledge of compliance frameworks, controls, risk management, audit preparation, policy development, and regulatory requirements.

• Experience managing several client engagements simultaneously while working independently and maintaining a consistently high delivery standard.

• Demonstrated ability to use AI tools to reduce manual work, improve consistency, and accelerate GRC deliverables.

• Ability to translate subject-matter expertise into reusable templates, playbooks, guided workflows, and structured systems.

• Strong commercial awareness, with the ability to manage pricing, packaging, utilization, margins, and delivery forecasting for an assigned portfolio.

• Excellent written and verbal communication skills, with confidence facilitating client workshops and presenting recommendations independently.

• Strong judgment and problem-solving skills, particularly when navigating ambiguity, scope changes, and complex compliance questions.

• Ability to identify potential risks early, establish appropriate quality controls, and elevate issues when necessary.

• Working knowledge of PCI DSS, HIPAA, ISO 42001, or related frameworks is an advantage.

• Certifications such as ISO 27001 Lead Auditor/Lead Implementer, CISA, or CISM are preferred.

• This is a six-month contract position and candidates should be available to join immediately.

• Comfortable working remotely with a high degree of ownership, written communication, collaboration, and accountability.

Benefits

• Fully remote working arrangement within India.

• Six-month contract opportunity with the potential to make an immediate impact.

• High degree of autonomy and ownership over client engagements and delivery outcomes.

• Opportunity to work across multiple international GRC and compliance engagements.

• Exposure to leading frameworks including ISO 27001, SOC 2, GDPR, PCI DSS, HIPAA, and ISO 42001.

• Opportunity to develop expertise in AI-enabled GRC workflows and compliance productization.

• Ability to build reusable methodologies, playbooks, and intellectual property that can influence future delivery at scale.

• Opportunity to contribute to commercial strategy through pricing, packaging, utilization, and margin ownership.

• Collaborative remote environment focused on trust, transparency, continuous improvement, and knowledge sharing.

• Inclusive working culture that values talent, curiosity, ownership, diverse perspectives, and impact.

• Opportunity to work closely with Sales, Solution Engineering, Customer Success, and other cross-functional teams.