Work Location – Mumbai / Bengaluru

Experience – 7+ years

Roles & Responsibilities

- Hands on experience in Information Security and cybersecurity standards (PCI DSS, SWIFT CSP, ISO 27001:2022, ISO 27701, SOC2 etc).
- Develop and implement cybersecurity standards, procedures. And guidelines for multiple cybersecurity standards (PCI DSS, SWIFT CSP, ISO 27001:2022, ISO 27701, SOC2 etc).
- Analyse security requirements, perform risk assessments, and identify potential vulnerabilities within IT systems.
- Should be adept at conducting gap analysis, risk assessments to identify threat and vulnerabilities based on NIST, ISO. PCI DSS, SWIFT frameworks.
- Analyse Cardholder data flows (Business and application data flows) and accordingly identify the risks to cardholder data, provide guidance to clients on PCI DSS awareness.
- Conduct regular PCI DSS audits to ensure secure payment transactions and adherence to PCI DSS Standard.
- Work independently or collaborate with teams to collect, analyse, consolidate evidence of clients PCI DSS compliance, should have written or supported in writing AOC and ROC’s.
- Conduct current-state assessment of data flows to identify sensitive datasets requiring obfuscation.
- Develop a comprehensive data obfuscation framework including governance model, workflows, and control points.
- Deliver documentation, playbooks,



and knowledge transfer to internal stakeholders for long-term sustainability.
- Provide guidance on tool selection and integration within existing data management and DevOps environments.
- Establish validation and monitoring controls to ensure data integrity and protection effectiveness.
- Should be able to understand and explain technical vulnerabilities.
- Intermediate knowledge on Active directory, firewalls, routers, switches, SCCM, MacAfee security products, DLP, Secure coding practices and product security

Must Have Skills :

- Excellent communication and presentation skills.
- Able to effectively interact with various functions.

Good to have Skills / Certification Minimum:

- PCI DSS QSA, PCIP, or PCI ISA, ISO27001:2022, ISO 27701, ISO 22301 Lead Auditor or implementor course

Positive to have:

- PCI DSS QSA, PCIP, or PCI ISA, CISSP, CISA, CISM, ISO22301

Qualification: BE/ BTech, MCA, MBA with specialization in Information Security Critical Thinking: Analysing information, problem-solving, and making informed judgments.

Collaboration skills: Working effectively with legal, IT, engineering, and business teams

Education Qualification: B-Tech, BCA, MCA, BE-Computer science, MBA – Information Technology, or specialization in Information security

Compliance Frameworks:Deep knowledge of PCI DSS, SWIFT CSP, NIST CSF, ISO 27001, GDPR.

📌 GRC Consultant (Bengaluru)
🏢 Atos
📍 Bengaluru