The Role
Lead product strategy and roadmap for AI-native GRC modules. Write unambiguous PRDs and API contracts, shape architecture decisions, use AI tools for prototyping, define telemetry and success metrics, and synthesize customer feedback to prioritize features and drive launches.
Summary Generated by Built In
Title: Technical Product Manager
Function: Product
Location: India (Remote)
Reporting: Sr Director - Product
Scrut is building the AI-native future of GRC - autonomous agents, headless APIs, an MCP server, and agentic workflows replacing what was historically manual, click-through work.
We're hiring a Technical Product Manager to own the strategy and roadmap for the modules you'll lead, sitting at the intersection of engineering, AI, and the compliance domain. This is a role for a seasoned PM who operates independently from day one. The bar is high on both technical depth and AI-native fluency - and we test for both.
- Own strategy and roadmap for your modules, end-to-end - from discovery and requirements through launch and iteration. Influence prioritization based on business impact, technical feasibility, and customer value.
- Write specs engineers build from without ambiguity - PRDs, user stories, and acceptance criteria covering API contracts, data models, integration logic, webhooks, and workflow rule sets.
- Shape the architecture conversation - evaluate feasibility and trade-offs early; hold your own on system design, service boundaries, and scalability rather than just facilitating.
- Work AI-natively - use AI-driven development tools (Claude, Cursor, Codex) daily for prototyping, spec-writing, and validating technical approaches.
- Instrument everything you ship - define the event taxonomy and success metrics before launch; use funnels, cohorts, and adoption data to decide what to double down on and what to kill. Bring data and judgment in equal measure.
- Champion the customer at every stage - scope and synthesize prospect and customer feedback, define market needs clearly, and map them to actionable product features.
- 5–10 years of product management in a technology company. This is not a junior role - you're already highly proficient at the core craft: PRDs, backlogs, user flows, sprints, working with designers in Figma, and communicating across engineering, design, and GTM.
- A track record of shipping in fast-paced, high-ambiguity startup or scale-up environments. You bring structure where there is none.
- Demonstrated ability to influence engineering, design, sales, and customer success without formal authority.
The path you took to build this fluency is flexible - CS degree, prior life as a software engineer, or years as a PM on deeply technical products. What matters is that it's real:
- Architecture & infrastructure - how clients talk to services, microservices vs. monolith trade-offs, scalability concerns (load balancing, caching, latency, uptime), cloud environments (AWS/GCP/Azure), staging vs. production.
- Integrations & data - REST and GraphQL APIs, webhooks, payload structures, JSON, relational vs. non-relational databases, and enough data-modeling sense to contribute meaningfully.
- Delivery - SDLC end-to-end: sprint planning, estimation, release management, post-release monitoring. Version control fluency (repos, branches, pull requests) to track progress and unblock decisions without a translator.
- Security & reliability - conversant in SOC 2, ISO 27001, GDPR, HIPAA at a conceptual level; treats technical debt as a product problem - when to absorb it, when to pay it down.
You don't need to write production code - but engineers should trust your specs, and architects should consider you a useful thought partner.
None of these are a must have - but they help:
- Proof of work. A GitHub link, a shipped agent, a prototype, technical writing - anything we can look at will certainly catch our attention.
- Domain experience in GRC, cybersecurity, or adjacent spaces (cloud security, DevSecOps, risk management).
- Background in developer-facing products - APIs, SDKs, integration platforms.
- Hands-on coding ability.
- Ground-floor impact at a pivotal inflection point - the product is going fully AI-native, and you'll shape how an entire category gets rebuilt around AI.
- Direct exposure to founders and leadership; your work is visible and consequential from week one.
- A high-performing team that values ownership, speed, and intellectual honesty.
- Competitive compensation, benefits, and a remote-first culture.
Why should this job excite you?
- Opportunity to make an early impact on one of the most promising, high-growth SaaS startups in India
- Flat hierarchy, performance-driven culture
- Rapid growth and learning opportunities
- Comprehensive medical insurance coverage
- A high-performing action-oriented team
- Competitive package, benefits and employee-friendly work culture
Scrut Automation is a one-stop platform for information security compliance, helping IT, ITES, and SaaS companies automate compliance programs - reducing manual effort by up to 70% - across SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and CCPA.
Founded by IIT/ISB/McKinsey alumni with 15+ years of combined infosec experience, Scrut is backed by Lightspeed Ventures and Endiya Partners, along with prominent angels from the global SaaS community.
Note: Due to a high volume of applications, only the shortlisted candidates will be contacted by the HR team. We appreciate your interest and effort.
Skills Required
- 5-10 years product management in a technology company
- Proven track record shipping products in fast-paced startup or scale-up environments
- Ability to influence engineering, design, sales, and customer success without formal authority
- Architecture & infrastructure fluency (microservices vs monolith, scalability, cloud: AWS/GCP/Azure)
- Integrations & data expertise (REST, GraphQL, webhooks, JSON, relational and non-relational databases)
- SDLC and delivery experience (sprint planning, release management, version control: repos/branches/PRs)
- Conceptual knowledge of security and compliance frameworks (SOC 2, ISO 27001, GDPR, HIPAA)
- Proof of work (GitHub link, shipped agent, prototype, technical writing)
- Domain experience in GRC, cybersecurity, cloud security, or DevSecOps
- Background in developer-facing products (APIs, SDKs, integration platforms)
- Hands-on coding ability
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Scrut Automation is a modern GRC platform designed to help fast-growing organizations simplify security, compliance, and risk management. By combining continuous automation with expert guidance, Scrut reduces manual workloads, accelerates audit readiness, and empowers teams to scale their security posture confidently. From HIPAA and SOC 2 to ISO 27001, GDPR, PCI, and beyond, Scrut helps teams achieve multi-framework compliance with ease.
