Work Location : Mumbai - Andheri (W); near Azad Nagar Metro Station.

Position : Senior Manager, Information Security Audit & Compliance

Role : Information security audit and compliance

Responsibilities :

- Maintain the organizations information security certifications, ie. PCI DSS, ISO 27001 and any other standardized ISMS compliance, ensuring compliance with regulatory requirements and industry standards.

- Manage and coordinate information security audits for the organization (conducted by clients, networks, banks and any other auditor) from preparation, audit engagement, providing control evidences, responding to queries and remediation.

- Conduct and manage the required system audits for external partners, including merchants, agent institutions and sub agents.

- Conduct systems audits for internal information security operations, resulting in enhanced security postures.

- Ensure compliance with the organizations information security policy, internal audit policy and developing ISMS audit plan, checklists based on the regulatory requirements/policies/SOP.

Experience :

- 4 to 6 years of strong execution experience in the areas of information security audit/ assurance within Banks/ FIs/ Payment/ Consulting companies.

- Experience in managing PCI DSS and/ or ISO 27001 audits for the company.

- Implementation of ISMS projects or systems DLP, DPDP, ISO, etc.

- Experience in handling and managing information security regulatory audits RBI, REBIT, etc.

Required Skills :

- Regulatory Compliance : Understanding of RBI regulations, including the Digital Payment Security Control framework, and experience in ensuring adherence to these standards for Payment Aggregator and Bharat Bill Payment System.

- Audit and Assurance : Skilled in planning and executing internal and external audits, ensuring that payment systems meet both regulatory and industry security standards, and addressing any gaps identified.

Preferred Qualifications :

- Bachelors Degree in Information Security/ Computer Science.

- Certified Information Systems Auditor (CISA).

- Certified Information Security Manager (CISM).

- PCI DSS/ ISO 27001 Lead Auditor or Implementer.