Company Description

Osto is a VC-backed, AI-native cybersecurity product startup focused on making modern security and compliance accessible to startups and SMBs. Founded by experienced cybersecurity entrepreneurs, the company builds a one-stop cyber platform that delivers real-time protection across cloud, endpoint, network, code, applications, and identity, with built-in compliance automation for frameworks such as SOC 2, ISO, HIPAA, GDPR and DPDP. The platform also integrates cyber insurance, VAPT, automated security questionnaire responses, and vCISO capabilities into a single SaaS solution.

Designed for fast-moving teams, Osto deploys in minutes and scales with customers across geographies and infrastructure, eliminating the need for large security teams. The mission is to turn security, compliance, and insurance from blockers into growth enablers for startups worldwide.

Role Description

We’re hiring a GRC Specialist at osto.

This is not a “check the compliance box” role.

You’ll work closely with me to build and strengthen Osto’s internal GRC program, while also helping customers navigate security, privacy, and compliance requirements across SOC 2, ISO 27001, GDPR, DPDP, HIPAA, ISO 42001, and more.

You’ll be working in a startup environment, so the role is hands-on, fast-moving, and high ownership. You should be comfortable figuring things out, working across functions, speaking with customers, and driving work to closure.

What you’ll work on

- Risk assessments,



control reviews, gap assessments, and compliance monitoring
- Audits, evidence collection, remediation tracking, and GRC documentation
- Internal GRC initiatives across security, technology, business, and leadership
- Customer-facing compliance engagements across information security and privacy requirements
- Improving our GRC processes, controls, and ways of working as we scale

What we’re looking for

- At least 2 years of hands-on GRC, information security risk, or compliance experience
- Strong understanding of security frameworks, controls, and audit requirements
- Exposure to SOC 2, ISO 27001, GDPR, DPDP, HIPAA, ISO 42001, or similar standards and regulations
- Excellent verbal and written communication skills. You’ll work directly with internal stakeholders and customers
- Strong analytical, documentation, and problem-solving skills
- High ownership. You can work independently, ask the right questions, and keep things moving

Positive to have: Relevant security, risk, audit, or compliance certifications.

This is an on-site role based in Gurugram, Haryana.

If you enjoy building, solving ambiguous GRC problems, and working directly with customers, I’d love to hear from you.

Reach out to me directly if you’re interested, or share this with someone who might be a strong fit.

Bonus points if you believe compliance should make the company better, not just make the auditor happier!

📌 GRC Specialist (Gurugram)
🏢 osto
📍 Gurugram