About the role
At @Mitigata, you'll lead our GRC delivery practice — taking clients from a signed engagement to certified, audit-ready compliance, with a team of consultants and a portfolio of clients behind you.
About the role:
You'll own end-to-end delivery across gap assessments, policy and control design, implementation support, internal audits, and certification readiness. You'll lead, hire, and develop consultants; manage concurrent engagements for scope, timelines, utilisation, and margins; act as the senior client escalation point and coordinate with auditors and certification bodies; drive adoption of Gordon GRC; build reusable playbooks and control libraries; and report delivery metrics like on-time delivery, first-attempt audit outcomes, and client satisfaction.
What we’re looking for
- 10+ years in GRC consulting, implementation, or audit — with 4+ years leading teams across multiple concurrent engagements
- Hands-on delivery of ISO 27001 & SOC 2 through to certification, plus 2+ of PCI-DSS, DPDPA, GDPR, RBI, SEBI, IRDAI
- Proven people leadership — hiring, coaching, reviewing work quality
- Strong project & portfolio management
- Clear written communication and high documentation standards
- Nice to have:
- ISO 27001 LA/LI, CISA, CISM, CRISC, or PMP
- Big 4 or specialist compliance consultancy background
- Experience with compliance automation platforms
- Regulated-entity experience in BFSI, insurance, or capital markets
