IT Administrator

Disseqt AI | Bengaluru| Full-time

Disseqt AI is building the AI Assurance category: the layer that sits between agentic AI and the risk functions that have to answer for it. Regulated enterprises across finance, insurance, and healthcare are shipping AI agents faster than their governance stacks can keep up. We give compliance and security teams continuous testing, real-time monitoring, and audit-ready evidence across the full deployment lifecycle, so "we think it's fine" becomes "here's the proof."

We're a lean, fast-moving team with operations in Bengaluru, San Francisco, and Dublin. We've already partnered with the likes of HCLTech, Microsoft, Tata Technologies, and Infosys to bring trustworthy agentic AI into production for regulated industries. Our customers cut AI testing time from weeks to days. We hold ourselves to the same standard of rigour internally.

Which is exactly why this role exists: we build audit-grade assurance for other people's AI. Our own internal IT, security, and compliance posture needs to be just as tight, because a scaled startup with regulated-industry customers can't run on good intentions and a shared spreadsheet.

We're hiring our first dedicated IT Administrator, someone who'll own identity, endpoints, network, data protection, and audit evidence end-to-end, and build the function from the ground up rather than inherit a mature one. If you like clean systems, tight access controls, and being the person auditors actually enjoy talking to, keep reading.

Identity, Tools & Access

• IdP administration (Okta / Entra / Google): SSO, SCIM, conditional access

• MFA / passkey enforcement: phishing-resistant auth for privileged accounts

• Manage all internal tools and services for productive, efficient use

• Joiner-Mover-Leaver automation: provisioning and offboarding to defined SLAs

• Quarterly access reviews: User Access Review (UAR) evidence ready for auditors

Endpoint

• MDM across Mac, Windows, and Linux: fleet enrollment, compliance baselines

• EDR operations: deploy, triage, quarantine workflows

• Disk encryption with key escrow: enforced and verifiable

• Privilege management: no standing local admin, elevation-on-demand

Network, Cloud & Remote Access

• ZTNA administration: per-app access with device-posture checks

• VPN management: always-on, no split-tunnel for production

• DNS filtering: endpoint-level, network-independent

• Cloud and SaaS administration: tenant security configuration, identity and access governance across our cloud and SaaS estate

Data Protection

• DLP across endpoint and SaaS: USB, clipboard, email, off-network coverage

• SASE / SWG: web filtering and shadow-IT discovery

Audit & Compliance

• ISO 27001 / SOC 2 evidence operations: logs, inventories, and reports on demand

• Asset lifecycle: procurement to certified disposal, with an auditable trail

• SaaS / vendor register: inventory ownership and security reviews

• Vendor management: selection, contracts, security reviews, and ongoing accountability

Operations

• SIEM log forwarding: endpoint and IdP events queryable

• ITSM discipline: ticket trails that stand up as audit evidence

• Incident response: device isolation, forensics pull, timeline writing

• Remote-wipe / lost-device runbook: tested and SLA-bound

• BCP / DR for IT systems: annual test evidence

• Audit track record (must-have): a clear, quantifiable history of audits participated in, specifically the number of audits run for or with financial and regulated entities (BFSI / fintech). Be ready to state how many you've personally managed and your role in each.

• Demonstrated ownership of SOC 2 and/or ISO 27001 evidence operations and certification cycles.

• Strong IT administration depth across identity, endpoint, and the operations stack above.

• Vendor management experience: security reviews, contracts, and accountability.

• Networking, cloud, and SaaS administration as a core part of the remit.

• Communication skills rated ≥ 4/5: you'll write runbooks, brief auditors, and explain controls to non-technical stakeholders.

• Comfort operating 0→1: building a function, not just maintaining an existing one.

• Scripting for fleet automation: Python / Bash / PowerShell

• Hands-on exposure to SIEM, EDR, ZTNA, and DLP tooling at scale

• Experience in a high-growth or regulated-industry environment