Associate Director - GRC Solutioning

Mitigata™ - Full-Stack Cyber Resilience; Bengaluru; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

Mitigata™ - Full-Stack Cyber Resilience seeks a senior presales leader to drive compliance solutions across ISO 27001/27701, SOC 2, PCI-DSS, DPDPA, GDPR, RBI, SEBI CSCRF and IRDAI. You will guide discovery, design engagement plans, and demonstrate Gordon GRC, while building proposals, SOWs, and pricing.

You will respond to RFPs and vendor security assessments and align compliance gains with insurance coverage.

Qualifications

• 10+ years in GRC, infosec consulting, or audit.
• ISO 27001 and SOC 2 expertise, plus 2+ of PCI-DSS, DPDPA, GDPR, RBI, SEBI, IRDAI.
• Ability to scope and estimate compliance programmes across company sizes.
• Translate regulation into plain business language.
• Strong proposal and documentation skills.

Responsibilities

• Own presales across ISO 27001/27701, SOC 2, PCI-DSS, DPDPA, GDPR, RBI, SEBI CSCRF and IRDAI.
• Run discovery, design engagement plans (consulting + platform + audit readiness), and demo Gordon GRC.
• Build proposals/SOWs/pricing and respond to RFPs and vendor security assessments.
• Collaborate with insurance team to connect compliance gains to coverage.

Skills

GRC background

Presales

ISO 27001

SOC 2

PCI-DSS

Tools

Gordon GRC

Proposal tools

Job description

At @Mitigata, you'll lead presales for our compliance offerings — pairing consulting and audit support with Gordon GRC, our compliance automation platform. You'll help clients see which frameworks apply, design a practical path to compliance, and show how a stronger posture reduces both risk and insurance cost.

About the role:

You'll own presales across ISO 27001/27701, SOC 2, PCI-DSS, DPDPA, GDPR, RBI, SEBI CSCRF and IRDAI — running discovery, designing engagement plans (consulting + platform + audit readiness), demoing Gordon GRC, building proposals/SOWs/pricing, responding to RFPs and vendor security assessments, and working with our insurance team to connect compliance gains to coverage. You'll also feed market insight into the product roadmap.

What we're looking for:

• 10+ years in GRC, infosec consulting, or audit — with 4+ years in presales / client-facing solution design
• Deep ISO 27001 & SOC 2, plus 2+ of PCI-DSS, DPDPA, GDPR, RBI, SEBI, IRDAI
• Proven at scoping & estimating compliance programmes across company sizes
• Able to translate regulation into plain business language
• Strong proposal and documentation skills

Nice to have:

• Experience with compliance automation platforms
• Big 4 or specialist compliance consultancy background

Protecting the businesses that power India's digital economy.

• Work that matters. Cyber incidents hit real organisations, from hospitals disrupted by ransomware to directors facing liability claims to startups whose funding is put at risk after a breach. Your work helps protect their systems, their finances, and their reputation.
• A distinctive model. We combine cybersecurity, compliance, and liability insurance in one company, because protection works best when prevention and coverage go together.
• Room to build. We are building an AI-native platform and one of India's most comprehensive AI-driven Security Operations Centers, with real scope to solve problems from first principles.
• Growth that follows impact. We are early and growing quickly, so scope often expands faster than headcount. People who learn fast and take ownership see their responsibilities grow with them.
• Startup pace, institutional foundations. IRDAI-licensed, backed by leading investors, and trusted by 800+ customers, while still moving at the speed of a startup.
• Competitive compensation, ESOPs, and the opportunity to contribute to work with national impact.

If you want your work to protect the people and businesses behind India's growth, we would love to hear from you. Build for protection. Build for Bharat