u/Pleasant-Session2807

Strategy & Operations Associate

Location: Remote (India based preferred, timing UK)*
*Experience: 0–2 years (freshers welcome)*

About ProtectifyAI
ProtectifyAI is a UK-based startup helping B2B tech start-ups get ISO 27001, GDPR, SOC 2 ready and build practical security and compliance programs. We work closely with founders and teams who need to move fast, win trust, and get ready for audits, customers, and growth.

The Role
We're looking for a sharp, ambitious person to work directly with the founder, across the whole business.

This is not a narrow role. You'll be involved in:

• Business strategy — helping think through pricing, partnerships, positioning, and direction
• Go-to-market — testing messaging, outreach, content, and figuring out what actually resonates
• Account management — joining client check-ins, following up, keeping work moving, and making sure clients feel looked after
• Advisory delivery — supporting security and compliance reviews across ISO 27001, GDPR, and SOC 2 readiness
• Building the company — improving how we sell, deliver, communicate, and operate as we grow

You do not need prior security, compliance, or consulting experience. We will teach you. What matters is that you learn quickly, communicate clearly, and take ownership.

Who We're Looking For
This is ideal for someone early in their career — 0–2 years' experience, including freshers.

Why This Role Is Different
You won't be doing coffee runs or meaningless admin. You'll see how a founder-led startup is actually built — from sales and strategy to client delivery and operations. You'll sit close to decisions, clients, problems, and opportunities.

Send a short message with your CV in DM

I’ve been building a security / compliance advisory business for the last 8 months.

The idea was simple:

Help startups with ISO 27001, GDPR, SOC 2, EU AI Act readiness and customer security questionnaires before these things block enterprise deals or fundraising.

Sounds useful, right?

But for months… nothing really converted.

Lots of polite interest.
“Sounds useful.”
“We’ll need this later.”
“Not urgent right now.”
“Let’s stay in touch.”

The painful lesson was that I was selling the *big future problem* too early.

Most founders don’t wake up thinking:
“I need a compliance programme.”
They think:
“I need to close this customer.”
“I need to pass this questionnaire.”
“I need to not look unprepared in diligence.”
“I need to know what matters first without wasting weeks.”

So I changed the offer.

Instead of pitching a full advisory / implementation project, I launched a small Founder Beta:

£100 for one readiness assessment:
ISO 27001
GDPR
EU AI Act

The output is a short 3–4 page report:
where you stand today
what gaps matter
what could block customers / investors
what to fix first based on your actual stage

Not a 50-page consultant deck. Not a massive project. Just clarity.

That finally got people to move.

The lesson for me:
If the buyer knows the problem is coming, but it is not painful *today*, don’t sell the full solution.
Sell the first step.
Make it low-risk.

Make it useful even if they don’t buy anything else.

For anyone selling services to startups: the “entry offer” matters more than I realised.

Curious how others here got past the “this sounds useful but not now” problem?

I’ve been building a small security / compliance advisory business on the side for the last 8 months.

The idea was simple:
Help startups with ISO 27001, GDPR, SOC 2, EU AI Act readiness and customer security questionnaires before these things block enterprise deals or fundraising.

Sounds useful, right?

But for months… nothing really converted.

Lots of polite interest.
“Sounds useful.”
“We’ll need this later.”
“Not urgent right now.”
“Let’s stay in touch.”

The painful lesson was that I was selling the *big future problem* too early.

Most founders don’t wake up thinking:
“I need a compliance programme.”
They think:
“I need to close this customer.”
“I need to pass this questionnaire.”
“I need to not look unprepared in diligence.”
“I need to know what matters first without wasting weeks.”

So I changed the offer.
Instead of pitching a full advisory / implementation project, I launched a small Founder Beta:
£100 for one readiness assessment:
ISO 27001
GDPR
EU AI Act

The output is a short 3–4 page report:
where you stand today
what gaps matter
what could block customers / investors
what to fix first based on your actual stage
Not a 50-page consultant deck. Not a massive project. Just clarity.

That finally got people to move.
The lesson for me:
If the buyer knows the problem is coming, but it is not painful *today*, don’t sell the full solution.

Sell the first step.
Make it low-risk.
Make it useful even if they don’t buy anything else.
For anyone selling services to startups: the “entry offer” matters more than I realised.

Curious how others here got past the “this sounds useful but not now” problem.

I’ve been building a small security / compliance advisory business on the side for the last 8 months.

The idea was simple:
Help startups with ISO 27001, GDPR, SOC 2, EU AI Act readiness and customer security questionnaires before these things block enterprise deals or fundraising.

Sounds useful, right?

But for months… nothing really converted.

Lots of polite interest.
“Sounds useful.”
“We’ll need this later.”
“Not urgent right now.”
“Let’s stay in touch.”

The painful lesson was that I was selling the *big future problem* too early.

Most founders don’t wake up thinking:
“I need a compliance programme.”
They think:
“I need to close this customer.”
“I need to pass this questionnaire.”
“I need to not look unprepared in diligence.”
“I need to know what matters first without wasting weeks.”

So I changed the offer.
Instead of pitching a full advisory / implementation project, I launched a small Founder Beta:
£100 for one readiness assessment:
ISO 27001
GDPR
EU AI Act

The output is a short 3–4 page report:
where you stand today
what gaps matter
what could block customers / investors
what to fix first based on your actual stage
Not a 50-page consultant deck. Not a massive project. Just clarity.

That finally got people to move.
The lesson for me:
If the buyer knows the problem is coming, but it is not painful *today*, don’t sell the full solution.

Sell the first step.
Make it low-risk.
Make it useful even if they don’t buy anything else.
For anyone selling services to startups: the “entry offer” matters more than I realised.

Curious how others here got past the “this sounds useful but not now” problem without reducing the entry price?