About Us : About the Role : We are looking for a high ownership-driven and hands-on Head of IT, GRC & Compliance to lead and manage the organization’s complete internal IT, Governance, Compliance, SaaS Operations, Identity & Access management, Endpoint Security, Procurement, and IT Operational Ecosystem.

This is a strategic and execution-heavy role responsible for ensuring: secure and scalable IT Operations, Compliance Readiness, Enterprise Saas Governance, Access Management, Endpoint Security, Audit Preparedness, Vendor Governance, And Overall It Operational Excellence.

Comfortable operating in a rapid-paced startup environment and can independently manage “everything IT”—from onboarding laptops and troubleshooting enterprise tools to leading SOC2/ISO audits and driving security governance initiatives.

What you'll be expected to do :

- Governance, Risk & Compliance (GRC) :

- Lead organization-wide compliance initiatives including:

- SOC 2

- ISO 27001

- GDPR

- customer/vendor security assessments

- internal IT audits

- Own and manage compliance automation platforms such as Scrut

- Maintain and improve:

- Policies

- SOPs

- security controls

- evidence repositories

- audit documentation

- Coordinate with legal, HR, engineering, finance, and leadership teams for audit readiness

- Conduct risk assessments and remediation tracking

- Manage customer security questionnaires and compliance requests

- Drive security awareness and compliance training initiatives

- Partner with legal teams for:

- DPA reviews

- vendor agreements

- compliance obligations

- contractual security requirements

- Identity & Access Management (IAM) :

- Manage end-to-end user lifecycle:

- Onboarding

- Offboarding

- access changes

- privileged access reviews

- Provision and manage access across:

- Google Workspace (Gsuite)

- Microsoft 365





- Azure / Entra ID

- GCP

- Implement and manage:

- SSO

- MFA

- RBAC

- SCIM provisioning

- Conditional Access policies

- Conduct periodic access audits and governance reviews

- Troubleshoot authentication and identity-related issues

- Drive Zero Trust access governance practices

- IT Operations & Enterprise Administration :

- Administer and support:

- Google Workspace

- Microsoft 365

- Azure / Entra ID

- Google Cloud Platform (GCP)

- Collaboration tools

- Productivity platforms

- Enterprise SaaS ecosystem

- Manage:

- Distribution groups

- Enterprise configurations

- SaaS integrations

- licensing and subscriptions

- Troubleshoot enterprise IT and SaaS platform issues across departments

- Ensure operational uptime, reliability, and scalability of enterprise IT systems

- Drive IT process automation and operational efficiency initiatives

- Endpoint Security & Device Management

- Manage endpoint governance and device compliance programs

- Administer MDM/endpoint management platforms such as:

- Sophos

- Sentinel

- or equivalent tools

- Coordinate endpoint hardening, device security baselines, and compliance enforcement

- Support EDR/security tooling deployment and operational coordination

- Manage:

- laptop lifecycle

- device inventory

- security compliance

- secure decommissioning

- Implement and maintain:

- BYOD policies

- endpoint security standards

- encryption compliance





- IT Asset Management & Procurement

- Own end-to-end IT asset lifecycle management:

- Procurement

- Allocation

- Tracking

- Recovery

- Disposal

- Maintain inventory of:

- Laptops

- Peripherals

- enterprise licenses

- SaaS subscriptions

- Manage vendor relationships and procurement workflows

- Optimize SaaS licensing utilization and costs

- Coordinate hardware provisioning for onboarding/offboarding processes

- Maintain procurement governance and approval workflows

- SaaS Governance & AI Tool Governance

- Monitor and manage:

- SaaS sprawl

- shadow IT

- unauthorized tool usage

- Establish governance for AI-enabled productivity and enterprise tools

- Ensure secure handling of organizational data across SaaS platforms

- Optimize SaaS utilization, access governance, and subscription costs

- Security Operations & Incident Coordination

- Coordinate IT-related security incidents including:

- phishing response

- access compromise

- insider access revocation

- lost/stolen devices

- Partner with security teams on:

- incident response

- vulnerability remediation

- operational security initiatives

- Support business continuity and disaster recovery readiness

- Maintain audit trails, operational logs, and governance records

You'll be a good fit if :

- 5-7+ years of experience in: IT Operations, GRC, IT Compliance, IAM, Enterprise IT Administration, SaaS Operations
- Strong hands-on experience with: Google Workspace, Microsoft 365, Azure / Entra ID, GCP, Scrut or equivalent compliance platforms
- Experience leading: SOC 2, ISO 27001, Audit programs, security assessments, risk management initiatives, VAPT.
- Strong understanding of: IAM, SSO, MFA, RBAC, SCIM, Zero Trust concepts
- Experience with: end

📌 Head of It, Grc & Compliance (Bengaluru)
🏢 Phyllo
📍 Bengaluru