Job Description
This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Senior Consultant: Trust Assurance in India.
This role sits at the intersection of GRC consulting, managed services, and security assurance, with a mandate to build and scale a high-impact service function from the ground up. You will design and operationalise structured delivery models covering risk assessments, privacy reviews, internal audits, and compliance readiness programs. The position plays a key role in transforming complex regulatory frameworks into repeatable, scalable, and AI-enabled service offerings. You will work in a fast-paced, product-led environment where consulting meets automation and standardisation. The scope includes both strategic ownership and hands-on execution across service design, delivery governance, and commercial outcomes. This is a highly visible role focused on building predictable, high-quality, and scalable trust assurance capabilities for enterprise customers.
Accountabilities:
- Build and operationalise the end-to-end delivery function, including intake, scoping, SOW creation, SLAs, QA frameworks, reporting, and change control mechanisms.
- Design reusable IP such as playbooks, templates, control mappings, audit checklists, and structured delivery frameworks.
- Lead phased service expansion across risk assessments, DPIAs, policy reviews, internal audits, audit readiness, and advanced security assurance programs.
- Own commercial performance including pricing models, margins, utilisation, capacity planning, forecasting, and revenue contribution.
- Partner with cross-functional teams to integrate services into sales cycles, improve deal conversion, and strengthen customer retention.
- Develop AI-enabled workflows and standardised systems to improve consistency, reduce manual effort, and ensure scalable delivery.
- Establish governance, QA guardrails, and risk controls to ensure high-quality and compliant service delivery.
Requirements:
- 3–6+ years of experience in GRC, security consulting, audit/advisory, or managed compliance services.
- Proven experience in building or scaling a services practice or delivery organisation (0→1 or early-stage scaling).
- Strong expertise in frameworks such as ISO 27001, SOC 2, GDPR, and risk assessment methodologies.
- Hands-on exposure to privacy assessments (DPIA) and familiarity with frameworks like NIST, FedRAMP, or HITRUST.
- Demonstrated ability to translate domain expertise into structured, repeatable, and AI-supported workflows.
- Strong commercial acumen including pricing, service packaging, margins, and operational efficiency.
- Excellent communication, stakeholder management, and workshop facilitation skills in complex enterprise environments.
- Certifications such as CISA, CISM, CISSP, ISO 27001 Lead Auditor/Implementer, or PCI QSA are a plus.
Benefits:
- 100% remote work flexibility across India
- Annual co-working allowance up to INR 14,000
- USD 1000 yearly learning and development budget
- Unlimited leave policy for better work-life balance
- Comprehensive health insurance coverage up to INR 10 lakh for employee and family
- Accident coverage up to INR 10 lakh and life insurance up to 3× annual salary
- INR 35,000 home workspace setup support
- Opportunity to work in a fast-scaling, high-ownership environment with strong autonomy
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
