Security GRC Lead

About the Role

The GRC Lead is a position within the Sprinklr Security Governance, Risk, and Compliance (GRC) team, reporting to the Director, GRC. The role assists the GRC team in planning and delivering critical compliance reports and certificates, including SOC 2, ISO 27001, C5, SOX ITGCs, PCI-DSS, and other relevant programs. The GRC Lead also documents, assesses, and tracks remediation of issues and risks identified during audit examinations and risk assessments.

The role may occasionally require attending conference calls outside normal office hours.

• Manage audit engagements (SOX, ISO 27001, C5, PCI-DSS, SOC 2, HIPAA) and audit request lists, ensuring appropriate fulfillment through stakeholder management.
• Coordinate and collate required evidence for external and internal audit support.
• Manage the control and process libraries and assist the business in implementing internal controls.
• Prepare agendas, document meeting minutes, and track completion of follow‑up actions.
• Lead junior staff to ensure critical tasks are completed on time and meet requirements.
• Lead internal and external audits related to documenting or evidencing control management practices.
• Participate in risk assessments, document risks in the risk register, and identify and document risk treatment.
• Assist the business in documenting, assessing, and remediating issues identified during audits and risk assessments.
• Assist in managing Sprinklr security standards and policies.
• Update and maintain the GRC Confluence and shared drives.
• Assist with management of risks, controls and requests in the GRC tool.

• ABachelor’s degree in a technical/security field or a non‑technical degree with experience in governance, risk, and compliance-related work.
• 5–7+ years of experience in risk, compliance management or an information security environment.
• Knowledge of security controls frameworks such as ISO 27001/27002 and NIST 800-53.
• Ability to quickly learn new technologies and experience working with a GRC tool.
• Excellent interpersonal, teamwork and project management skills.
• Strong written and verbal communication skills.
• Strong sense of accountability, ability to work independently with minimal direction and follow‑up.
• Demonstrated ability to perform process analysis and document controls.
• Proven analytical and troubleshooting skills.
• Broad understanding of information security risk and controls.
• Personal integrity, accountability, and ownership of tasks and activities.
• Ability to foster a collaborative working relationship with multiple areas and business lines globally and remotely.

Sprinklr offers a comprehensive benefits suite to support well‑being, including voluntary healthcare coverage where applicable and paid time off. The company invests in talent development through a mentoring program and supports mental and physical wellness.

Sprinklr is an equal‑prospect workplace and complies with all applicable federal, state, and local fair employment practices laws. We are committed to equal employment opportunity regardless of race, color, religion, creed, national origin or ancestry, ethnicity, sex (including gender, pregnancy, sexual orientation, and gender identity), age, physical or mental disability, citizenship, service in the uniformed services, genetic information or any other characteristic protected under applicable law.

Reasonable accommodations are available upon request during the interview process.