Assistant Vice President (AVP) - IT Governance, Risk & Compliance (GRC)

Mitigata™ - Full-Stack Cyber Resilience; Bengaluru; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

Mitigata is seeking a senior AVP to own IT Governance, Risk & Compliance, shaping strategy and ensuring adherence to guardrails across IT and business operations. You'll partner with CIO/CTO/CISO, CRO, Legal, Privacy, and Internal Audit to drive governance across cloud, major initiatives, vendor risk, and business resilience, reporting material risks to senior management.

This leadership role demands deep GRC expertise, communication at executive level, and the ability to translate risk into

Qualifications

• 12+ years in IT GRC or related fields.
• Proven governance framework experience.
• Strong controls, audit and regulatory management experience.

Responsibilities

• Define and mature the IT GRC framework and risk programs.
• Lead audits, certifications, and regulatory assessments.
• Interface with CIO/CTO/CISO, CRO, Legal, Privacy, and Internal Audit.

Skills

IT GRC leadership

Tech risk management

Regulatory compliance

Audit & assurance

Third-party risk

ISO/IEC 27001 / NIST / COBIT

Education

Master's / MBA

Job description

We're Hiring | Assistant Vice President (AVP) – IT Governance, Risk & Compliance (GRC)

At @Mitigata, this is a senior leadership seat. You'll own IT governance, technology risk, compliance, and assurance end-to-end — making sure strategy, systems, and operations run within the right risk and regulatory guardrails.

About the role:

You’ll define and mature the IT GRC framework, lead technology risk and compliance programs, and serve as the senior interface for audits, certifications, and regulatory assessments. Working closely with the CIO/CTO/CISO, CRO, Legal, Privacy, and Internal Audit, you’ll drive governance across cloud, major tech initiatives, third-party risk, and business resilience — and report material risks to senior management and governance committees.

What we're looking for:

• 12+ years in IT GRC, Technology Risk, Information Security, or IT Audit — including program leadership
• Proven experience building & maturing IT governance and risk frameworks
• Strong command of IT controls, control assurance, and audit/regulatory management
• Hands-on with third-party/vendor risk, policy & standards, and exception management
• Working knowledge of ISO/IEC 27001, NIST, COBIT, ITIL, GDPR, DPDP & ISO/IEC 42001
• Experience with privacy, business continuity & technology resilience governance

Nice to have:

• Master's / MBA, and experience in large or multinational organizations