The Chance

We are looking for a Lead – Ecosystem Compliance to oversee and strengthen compliance across NPCI’s partner ecosystem. The role involves managing security assessments, audit processes, and third-party risk, ensuring adherence to compliance standards and safeguarding the integrity of NPCI products.

Job Details

- Job Title: Lead – Ecosystem Compliance

- Division: Market Information Security

- Years of Experience: 6 to 9 years

- Education: BE / BTech or equivalent

- Employment Type: Full-time

- Location: Mumbai

- Role Type: Permanent

Key Responsibilities

- Oversee ecosystem compliance across various NPCI products and participating entities

- Validate security assessment reports, including:
- Vulnerability Assessment (VA)

- Penetration Testing (PT)

- Configuration Audits

- Application Security (AppSec)

- Source Code Review

- Frontend and manage security audits of ecosystem entities

- Track and ensure data localization compliance across ecosystem partners

- Review and validate onboarding security assessment reports submitted by entities

- Manage and oversee third-party risk management processes





- Ensure timely closure of compliance gaps and audit observations

- Engage with internal and external stakeholders to maintain strong compliance governance

- Provide regular updates, dashboards, and escalation on compliance posture

Requirements

Key Skills and Experience Required

- Strong understanding of ecosystem compliance, third-party risk, and audit frameworks

- Knowledge of reviewing VA/PT, AppSec, and security assessment reports

- Knowledge of data localization requirements and regulatory expectations in payments ecosystem

- Experience in managing security audits and compliance processes

- Familiarity with NPCI ecosystem, products, and partner integrations

- Strong stakeholder management and communication skills

- Excellent analytical and risk assessment capabilities

- Ability to manage multiple stakeholders and compliance activities simultaneously

Preferred Qualifications

- Certifications such as CISA, CISSP, ISO 27001 Lead Auditor/Implementer (good to have)

- Experience in BFSI / Payments domain

- Familiarity with RBI guidelines, PCI DSS, and security compliance frameworks

📌 Lead Ecosystem Compliance (Mumbai)
🏢 NPCI
📍 Mumbai