Key Responsibilities
Lead SOC 2 Type II audit readiness: gap assessments, control mapping, evidence collection, and audit liaison.
Drive PCI DSS and PCI P2PE compliance efforts, including scoping, gap analysis, remediation tracking, and QSA coordination.
Develop and maintain the Third-Party Risk Management (TPRM) program, including vendor assessments, compliance validation, and contract requirements.
Collaborate with engineering on security reviews for cloud infrastructure, databases, APIs, and application logging requirements.
Maintain compliance documentation, policies, standards, and procedures; track remediation across multiple concurrent workstreams.
Provide compliance guidance on AWS services including IAM, Config, Secrets Manager, and payment cryptography key management.

Qualifications

Required Qualifications
5+ years of experience in security compliance, GRC, or a related information security role.
Hands-on experience with SOC 2 Type II audits — from gap assessment through audit completion.
Working knowledge of PCI DSS (v4.0)



and PCI P2PE standards; experience in payment technology environments strongly preferred.
Experience with AWS security services: IAM, Config, CloudTrail, Secrets Manager, Security Hub.
Solid understanding of TPRM frameworks and third-party risk assessment processes.
Excellent written and verbal communication; able to translate compliance requirements into actionable engineering tasks.
Highly organized with the ability to manage multiple compliance programs and deadlines simultaneously.

Preferred Qualifications
Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related technical discipline.
Experience in fintech, payments, or financial services settings.
Familiarity with SIEM platforms (e.g., Wazuh) and endpoint security tools (e.g., CrowdStrike).
Exposure to AI/ML security considerations or secure AI access frameworks.

📌 Senior Security Compliance Engineer Chennai (India)
🏢 Valor Paytech India Private
📍 India