Company Description Kensara.ai is an AI-native compliance firm focused exclusively on India’s Digital Personal Data Protection Act (DPDPA), helping organizations shift from manual, checklist-based audits to continuous, auditable data protection compliance. The company combines autonomous AI agents with experienced privacy professionals to deliver end-to-end DPDPA support, including data mapping, consent and rights management, DPIAs, policy drafting, vendor assessments, breach readiness, and ongoing monitoring.

Built for Indian startups, SMEs, and enterprises, Kensara.ai enables fast, reliable, and cost-effective compliance without reliance on spreadsheets or fragmented tools. The platform is particularly tailored to digital-first and AI-first companies, including SaaS, fintech, healthtech, and marketplace businesses preparing for audits or investor diligence. Kensara.ai’s mission is to make DPDPA compliance faster, clearer, and more trustworthy so companies can scale confidently and reduce risk from regulatory notices, audits, or breaches.

Role Description This is a full time remote role for a GRC & ISO Consultant at Kensara.ai. The consultant will design, implement, and maintain Governance, Risk, and Compliance (GRC) frameworks aligned with DPDPA and relevant ISO standards (such as ISO 27001 and related security and privacy frameworks).

Day-to-day responsibilities include conducting gap assessments and risk analyses, mapping data flows, defining controls, and preparing organizations for internal and external audits.



The role involves drafting and refining policies and procedures, advising on consent and rights management, reviewing vendor and third-party risk, and supporting incident and breach readiness plans. The consultant will collaborate closely with clients’ leadership and operations teams, translate regulatory requirements into practical controls, and work with Kensara’s AI-driven platform to ensure accurate, up-to-date compliance documentation and reporting.

Qualifications

- Candidates should possess strong GRC skills, including governance framework design, risk assessment, control implementation, and compliance monitoring.
- Candidates should possess expertise in ISO and data protection standards, such as ISO 27001, ISO 27701, and familiarity with DPDPA or comparable privacy regulations (e.g., GDPR).
- Candidates should possess experience in policy and process development, including drafting security and privacy policies, procedures, and playbooks.
- Candidates should possess client-facing consulting skills, including stakeholder management, requirement gathering, and clear communication of complex regulatory concepts.
- Candidates should possess strong analytical and documentation skills, including structured problem-solving, report writing, and audit preparation.
- Relevant qualifications such as a bachelor’s degree in law, information security, computer science, or a related field are preferred; certifications like ISO 27001 Lead Implementer/Lead Auditor, CIPP, CIPM, or similar are an advantage.

📌 GRC & ISO Consultant (India)
🏢 Kensara
📍 India