Key Result Areas
Supporting Actions
Regulatory & Compliance Audits for Payments
- Lead and coordinate payment?industry regulatory audits such as RBI, NPCI, PCI?DSS, , CERT?IN, etc.
- Manage end?to?end audit activities including audit calendar management, documentation preparation, evidence collection, and stakeholder coordination.
- Track audit observations/findings and ensure timely closure with respective control owners.
Regulatory compliances
- Identify all regulatory compliance requirements.
- Review and update the policies to ensure identified regulatory requirements are drafted in policies.
- Conduct the assessments to ensure implemented controls are meeting to regulatory compliances.
Data Loss Prevention (DLP) & Proxy Governance
- Review, implement, and maintain DLP and Proxy policies across the organization.
- Perform DLP and Proxy exception reviews, ensuring justification, approval, and tracking.
- Conduct ongoing monitoring and analysis of High and Medium severity DLP incidents.
- Collaborate with IT/security teams to fine?tune policies and reduce false positives.
Control Validation & Compliance Monitoring
- Perform control validation to ensure compliance with internal policies, procedures, and regulatory guidelines.
- Execute periodic checks on access management, data protection controls, endpoint security, and network controls.
- Document deviations and drive corrective action plans with respective teams.
Conduct Third-Party risk assessments
- Understand the business requirement from proposed solution, connect with the vendor and functional/data/IT SPOCs to understand the architecture of the proposed solution’s integration and data movement
- Conduct the InfoSec/cyber risk assessment to identify InfoSec/cyber related risks and regulatory requirement’s compliance
- Submit the risk assessment report to concern stakeholders with highlighting residual InfoSec/cyber risks and provide mitigation recommendation for the same
- Track with businesses to ensure