The Chance
We are looking for a Non-Regulatory Compliance to manage and support compliance across key industry standards and audit frameworks. This role is critical in ensuring adherence to ISO standards, PCI DSS, and internal audit requirements while supporting audit execution, reporting, and governance activities.
Job Details
- Job Title: Non-Regulatory Governance
- Division: Market Information Security
- Years of Experience: 3 to 6 years
- Education: BE / BTech or equivalent
- Employment Type: Full-time
- Location: Mumbai
- Role Type: Permanent
Key Responsibilities
- Manage non-regulatory compliance activities, including:
- ISO 27001, ISO 22301
- PCI DSS
- Internal Audits
- IT General Controls (ITGC)
- TPAP/ASP Audits
- Develop and maintain a compliance and audit calendar, ensuring timely execution and completion of activities
- Support end-to-end audit lifecycle, including preparation, execution, and closure
- Collect, review, and provide audit evidence and documentation
- Assist the Compliance Lead during internal and external audits
- Track and report compliance status, highlighting risks, gaps, or delays
- Escalate issues proactively and ensure timely closure of audit findings
- Review and validate artifacts/evidence against audit observations
- Collaborate with internal stakeholders to ensure adherence to compliance requirements
- Build and maintain strong knowledge of NPCI ecosystem, products, and circulars
Requirements
Key Skills and Experience Required
- Strong understanding of compliance frameworks and audit principles
- Hands-on experience in managing ISO 27001, PCI DSS, PCI-SSF, PCI-PIN, ITGC, and internal audits
- Familiarity with RBI guidelines, NPCI circulars, and payment ecosystem compliance
- Strong documentation, reporting, and stakeholder management skills
- Ability to manage multiple audits and deadlines effectively
- Strong analytical and problem-solving capabilities
- Ability to work independently and collaboratively within teams
Preferred Qualifications
- Experience with audit tools and compliance management systems
- Familiarity with RBI-DPSC guidelines and payment industry standards
- Certifications such as ISO 27001 Lead Implementer/Auditor, CISA, or similar (good to have)
📌 Senior Associate Non Regulatory Governance (Mumbai)
🏢 NPCI
📍 Mumbai