Sprinto is an Autonomous Trust Platform that centralizes trust requirements across security frameworks, vendors, and customers.
Sprinto autonomously executes tasks needed to maintain trust across compliance, audits, risk management, vendor risk, privacy, and AI governance, enabling organizations to maintain a strong, reliable trust posture without draining operational bandwidth and resources on repetitive tasks.
Backed by top-tier investors such as Accel, Elevation, and Blume Ventures, we’ve raised $31.8M in funding to fuel our mission. Trusted by over 4,000 organizations across 75 countries, Sprinto helps organizations stay audit-ready, manage real-time risks, and scale fearlessly. With 300+ native integrations and AI-driven automation, Sprinto supports 200+ global security standards natively, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and more. Sprinto's extensible architecture enables organizations to build and support an infinite number of custom integrations and frameworks.
Founded in 2020 by second-time founders Girish Redekar and Raghuveer Kancherla, Sprinto powers compliance for organizations like Whatfix, Encora, Anaconda, Whatnot, Ultrahuman, WeWork, Everstage, AI Foundation, HackerRank, and many more.
Life as a Sprinter -Nobody succeeds at Sprinto by staying in their lane.
We are organized around problems, not job titles. Sprinters take ownership beyond their role, solve hard problems, and care deeply about the impact they create. If something can be improved, fixed, or built, we don't wait for permission; we step in.
Being remote means we rely less on proximity and more on trust. We write things down, communicate openly, and move quickly because great teams aren't built by sitting together, they're built by pulling in the same direction.
We believe progress beats perfection, feedback is a gift, and doing the right thing matters, even when nobody is watching.
And while we move with urgency, we never move alone.
The mission -Trusted authority on global privacy regulation and AI governance — a DPO-like profile combining hands-on delivery (DPIA, ROPA, privacy program builds) with working fluency in reading and interpreting privacy law. Not a substitute for outside counsel, but able to translate regulatory text into program requirements without waiting on legal for every question.
Where you'll leave your mark?
Lead delivery of DPIAs, ROPA build-outs, privacy program gap assessments, GDPR/DPDP/EU AI Act compliance programs, cross-border transfer assessments (SCCs, adequacy), and privacy notice/policy reviews.
Serve as Sprinto's internal authority on evolving privacy regulation: GDPR enforcement trends, India's DPDP Rules, EU AI Act phased obligations, US state privacy laws (CCPA/CPRA, VCDPA, etc.), and other regional frameworks (PDPL, PIPL) as customer demand requires.
Build and maintain DPIA templates, ROPA templates, legitimate interest assessment frameworks, and AI governance/impact assessment templates mapped to EU AI Act risk tiers.
Define packaging for privacy services (e.g., DPIA-as-a-service, ROPA sprint, privacy program build fixed-fee tiers).
Own pricing, margin, and utilization on your engagement book; forecast capacity for privacy demand.
Partner with Sales/SE/CS on privacy-attach opportunities.
Build AI-assisted DPIA/ROPA generation playbooks with mandatory human validation gates — privacy work carries more interpretive and liability weight than technical control mapping, so review gates should be heavier, not lighter.
Define explicit boundaries/disclaimers: this role provides regulatory/program guidance, not legal advice. Know when to tell a customer to get outside counsel, and don't blur that line under deal pressure.
Support customers navigating regulator inquiries or breach-notification timelines in an advisory capacity only.
Deliver
Build reusable IP
Own commercial outcomes
AI-enabled productization
Quality & risk
The kind of builder we're looking for -
5+ years in privacy consulting, DPO/privacy office roles, or in-house privacy program ownership.
Hands-on DPIA and ROPA delivery at scale — not just policy drafting.
Deep: GDPR, India's DPDP Act.
Working knowledge: EU AI Act, US state privacy laws, and awareness of other regional frameworks (PDPL, PIPL).
Legal background (JD/LLM, or paralegal/compliance-law experience) — enough to read and interpret regulatory text independently for routine questions. Not a requirement; treat as a differentiator, not a filter, given how narrow this combination is in the market.
Demonstrated use of AI tools to reduce manual effort and standardize deliverables.
Able to translate domain expertise into reusable templates and guided systems.
Comfortable owning pricing/margin for a specialized, judgment-heavy service line.
Excellent written communication; confident handling ambiguous regulatory questions in live customer settings.
IAPP certifications (CIPP/E, CIPM, CIPT, FIP), formal DPO certification.
Success metricsUtilization % and gross margin on privacy engagements.
Regulatory-change responsiveness — time to update playbooks after new guidance/rules land.
QA pass rate, rework rate, CSAT.
Attach rate for privacy services; deal-unblock impact where privacy expertise was the gating factor.
Experience
Domain mastery
Good to have
AI-enabled workflow proficiency
Operator strengths
Preferred
- Work wherever you are: We are 100% remote, so you get to choose if you want to work from home, a cafe, the hills, or the beach.
- Co-working, on the house: If co-working is your jam, we offer a generous annual allowance.
- We care about your learning: We are invested in seeing you grow and commit USD 1,000 annually to help you level up your skills.
- We count your spark, not your leaves: Unlimited leave so you can reset when you need to.
- Your Safety Net, Woven In: Health insurance with coverage up to INR 10 lakh for you and your family, accident protection of an additional INR 10 lakh, and life insurance worth 3x your annual salary.
- Workspace setup of your dreams: We chip in INR 35,000 to help you build a setup that works for you.
Inclusion & Diversity -
At Sprinto, talent, curiosity, and ownership matter more than where you come from. We hire people for the problems they can solve, the impact they create, and the way they help others succeed—not their background, identity, or personal circumstances. We believe the best teams are built when people with different perspectives come together around a shared ambition to build something meaningful.
We're proud to be an equal opportunity employer and are committed to creating a fair, inclusive, and accessible hiring process for everyone.
