Key Responsibilities

- Lead SOC 2 Type II audit readiness: gap assessments, control mapping, evidence collection, and audit liaison.
- Drive PCI DSS and PCI P2PE compliance efforts, including scoping, gap analysis, remediation tracking, and QSA coordination.
- Develop and maintain the Third-Party Risk Management (TPRM) program, including vendor assessments, compliance validation, and contract requirements.
- Collaborate with engineering on security reviews for cloud infrastructure, databases, APIs, and application logging requirements.
- Maintain compliance documentation, policies, standards, and procedures; track remediation across multiple concurrent workstreams.
- Provide compliance guidance on AWS services including IAM, Config, Secrets Manager, and payment cryptography key management.

Qualifications

Required Qualifications

- 5+ years of experience in security compliance, GRC, or a related information security role.
- Hands-on experience with SOC 2 Type II audits — from gap assessment through audit completion.
- Working knowledge of PCI DSS (v4.0)



and PCI P2PE standards; experience in payment technology environments strongly preferred.
- Experience with AWS security services: IAM, Config, CloudTrail, Secrets Manager, Security Hub.
- Robust understanding of TPRM frameworks and third-party risk assessment processes.
- Excellent written and verbal communication; able to translate compliance requirements into actionable engineering tasks.
- Highly organized with the ability to manage multiple compliance programs and deadlines simultaneously.

Preferred Qualifications

- Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related technical discipline.
- Experience in fintech, payments, or financial services environments.
- Familiarity with SIEM platforms (e.g., Wazuh) and endpoint security tools (e.g., CrowdStrike).
- Exposure to AI/ML security considerations or secure AI access frameworks.

📌 Senior Security Compliance Engineer (India)
🏢 Valor Paytech India Private
📍 India