Company Description Kensara.ai is an AI-native compliance firm focused exclusively on India’s Digital Personal Data Protection Act (DPDPA), helping businesses move from manual, checklist-driven audits to clear and continuous data protection compliance. By combining autonomous AI agents with experienced privacy professionals, the company delivers end-to-end DPDPA support, including data mapping, consent and rights management, DPIAs, policies, vendor assessments, breach readiness, and ongoing monitoring. Kensara.ai serves Indian startups, SMEs, and enterprises that require fast, reliable, and affordable compliance without relying on spreadsheets and fragmented tools. The platform is built for digital-first and AI-first organizations, including SaaS, fintech, healthtech, and marketplaces preparing for audits or investor diligence, as well as service providers that need a strong DPDPA posture to win and retain enterprise clients. Kensara.ai’s mission is to make DPDPA compliance faster, clearer, and more trustworthy so companies can scale confidently without fearing notices, audits, or breaches. Role Description The GRC Lead Auditor is a full time remote role responsible for leading governance, risk, and compliance audits with a focus on DPDPA and related data protection obligations. In this position, the auditor plans and executes end-to-end audit engagements, including scoping, evidence collection, testing controls, documenting findings, and presenting clear recommendations to stakeholders. The role includes collaborating with privacy, security,



and product teams to assess compliance posture, identify gaps, and support remediation plans across processes, technology, and vendor ecosystems. The GRC Lead Auditor will help design and refine audit methodologies, leverage Kensara.ai’s AI-native platform for continuous monitoring, and contribute to playbooks, checklists, and templates that strengthen clients’ readiness for regulatory inspections and investor due diligence. The role also involves educating clients on best practices, supporting risk assessments and DPIAs, and maintaining up-to-date knowledge of DPDPA, global privacy standards, and emerging risks. Qualifications
• Candidates should possess strong governance, risk, and compliance skills, including experience with audit frameworks, risk assessments, internal controls, and compliance management.
• Candidates should possess data privacy and regulatory expertise, with related standards such as GDPR, ISO/IEC 27701, or other data protection regulations.
• Candidates should possess technical and analytical skills, such as understanding of IT security controls, data flows, and cloud-based environments, along with the ability to interpret complex datasets and audit evidence.
• Candidates should possess communication and documentation skills, including clear report writing, stakeholder communication, presentation of audit findings, and the ability to translate technical issues into business impact.
• Candidates should possess collaboration and client-facing skills, including the ability to work with cross-functional.

📌 GRC Lead Auditor (India)
🏢 Kensara
📍 India