Job Opening: InfoSec ( Audit & Compliance )

Location: Mumbai

Experience: 4-6 Years

About Antal:

Antal International, East Patel Nagar Delhi, is a leading recruitment consultancy having expertise in connecting top talent across IT, Manufacturing and FMCG industries with leading organizations.

About the role:

We are looking for an experienced Information Security professional with strong expertise in Information Security Audit & Compliance. The role focuses on managing information security certifications, ensuring regulatory compliance, coordinating internal and external security audits, and strengthening the organization's Information Security Management System (ISMS). The ideal candidate should have hands-on experience in PCI DSS, ISO 27001, RBI/REBIT regulatory audits, and the Banking or Payments domain.

Role & responsibilities

- Manage and maintain Information Security certifications such as PCI DSS and ISO 27001, ensuring compliance with regulatory and industry standards.
- Plan, coordinate, and manage internal and external Information Security audits conducted by clients, banks, payment networks, and regulatory bodies.
- Prepare audit documentation, provide control evidence, respond to audit observations, and track remediation activities.
- Conduct security audits for merchants, partners, agents, and internal systems to improve the organization's security posture.
- Develop and maintain Information Security policies, ISMS documentation, audit plans, SOPs, and compliance checklists.
- Ensure compliance with RBI, REBIT, PCI DSS, ISO 27001,



and other applicable regulatory requirements.
- Support implementation and continuous improvement of ISMS initiatives, including DLP and other security compliance programs.

Required Skills & Expertise

- Strong experience in Information Security Audit & Compliance.
- Hands-on experience managing PCI DSS and ISO 27001 audits.
- Experience handling RBI, REBIT, and other regulatory compliance audits.
- Good understanding of ISMS (Information Security Management System) implementation and governance.
- Experience with Audit & Assurance, control testing, audit evidence collection, and remediation tracking.
- Knowledge of Data Loss Prevention (DLP), information security policies, and regulatory compliance frameworks.
- Understanding of Digital Payment Security Controls, Payment Aggregator, and Banking/Payments security requirements.
- Strong analytical, documentation, stakeholder management, and communication skills.

What Were Looking For:

- Self-driven qualified with strong ownership and accountability.
- Excellent analytical and problem-solving skills.
- Ability to manage multiple audits and compliance activities simultaneously.
- Solid attention to detail with a commitment to quality and regulatory compliance.
- Experience working in Banking, NBFC, Financial Services, Payments, or Information Security Consulting environments.

Prefered Qualifications:

- Bachelor's Degree in Information Security, Computer Science, or a related field.
- Certifications such as CISA, CISM, PCI DSS Lead Auditor/Implementor, or ISO 27001 Lead Auditor/Implementor are preferred.

📌 Info-Sec Engineer (Mid) (Mumbai)
🏢 Steersman Talent Acquisition
📍 Mumbai