ABOUT REGODIT

Regodit is an AI-first GRC platform that helps organizations automate evidence collection, manage risks, monitor controls, and stay audit-ready. We support growing businesses across SOC 2, ISO 27001, GDPR, PCI DSS, HIPAA, DPDP and other frameworks, combining intelligent technology with practical compliance expertise.

THE OPPORTUNITY

We are looking for a technically grounded GRC professional to own customer compliance engagements from discovery through audit closure.

You will translate framework requirements into practical controls, guide customers through evidence collection and remediation, coordinate with auditors, and build trusted relationships with security, engineering, product, legal, and business leaders.

Experience in FinTech and digital payments will be a strong advantage.

WHAT YOU WILL DO

- Lead end-to-end readiness and compliance programs for ISO 27001, SOC 2, GDPR, PCI DSS, and related customer or regulatory requirements.
- Work directly with customers to understand their architecture, business processes, risk profile, control environment, and compliance priorities.
- Own security questionnaires, due diligence requests, customer assurance responses, control narratives, and supporting evidence.
- Coordinate internal and external audits, including scoping, evidence requests, walkthroughs, auditor queries, observations, remediation, and closure.
- Conduct gap assessments, risk assessments, control design reviews, evidence validation, and readiness reporting.




- Partner with engineering and operations teams to translate compliance requirements into implementable technical and process controls.
- Track commitments, control owners, exceptions, risks, and corrective actions to completion, keeping customers and leadership informed.
- Provide practical compliance insights to improve Regodit's workflows, templates, control mappings, and product roadmap.

WHAT WE ARE LOOKING FOR

- Hands-on experience implementing or operating ISO 27001 and SOC 2 programs, with working knowledge of GDPR and PCI DSS.
- A technical foundation in cloud infrastructure, application security, identity and access management, network security, secure software delivery, or security operations.
- Experience preparing audit evidence, policies, control narratives, risk registers, and remediation plans for customer and auditor review.
- Proven experience owning customer security questionnaires and explaining security controls clearly to technical and non-technical audiences.
- Strong project management skills and the ability to manage multiple customers, stakeholders, priorities, and deadlines.
- Excellent communication skills, sound judgment, and confidence in customer and auditor conversations.

STRONG ADVANTAGES

- Experience in FinTech, banking, NBFCs, payments, or regulated financial services.
- Familiarity with UPI,



TPAP, NPCI, RBI requirements, payment security, or third-party risk in the Indian digital payments ecosystem.
- Experience with cloud-native environments and evidence sources such as AWS, Azure, GCP, identity platforms, ticketing systems, code repositories, and security tooling.
- Certifications such as ISO 27001 Lead Auditor or Lead Implementer, CISA, CISSP, CCSK, PCI ISA, or privacy certifications.

HOW SUCCESS WILL BE MEASURED

• Audit Readiness: Ensuring evidence, control narratives, risks, and remediation actions are complete, defensible, and easy to review.

• Program Ownership: Driving milestones, dependencies, and open actions to closure with transparent communication and accountability.

• Practical Outcomes: Translating compliance requirements into sustainable controls that fit the customer's workplace rather than paper-only compliance.

WHY JOIN REGODIT

You will work at the intersection of product, security, and customer trust. The role offers direct ownership of meaningful compliance outcomes, close collaboration with customers and auditors, and the opportunity to shape an AI-powered platform built to make compliance continuous, evidence-driven, and operationally useful.

HOW TO APPLY

Interested candidatescan reach out to us directly on LinkedIn or share their resume at [email protected].

- Please include a short note highlighting the compliance programs you have owned, the frameworks you have worked with, and your experience supporting customers or auditors.

📌 Senior GRC & Compliance Consultant (Gurugram)
🏢 Regodit
📍 Gurugram