We are looking for a Non-Regulatory Compliance to manage and support compliance across key industry standards and audit frameworks. This role is critical in ensuring adherence to ISO standards, PCI DSS, and internal audit requirements while supporting audit execution, reporting, and governance activities.
- Job Title: Non-Regulatory Governance
- Division: Market Information Security
- Years of Experience: 3 to 6 years
- Education: BE / BTech or equivalent
- Employment Type: Full-time
- Location: Mumbai
- Role Type: Permanent
- Manage non-regulatory compliance activities, including:
- ISO 27001, ISO 22301
- PCI DSS
- Internal Audits
- IT General Controls (ITGC)
- TPAP/ASP Audits
- ISO 27001, ISO 22301
- Develop and maintain a compliance and audit calendar, ensuring timely execution and completion of activities
- Support end-to-end audit lifecycle, including preparation, execution, and closure
- Collect, review, and provide audit evidence and documentation
- Assist the Compliance Lead during internal and external audits
- Track and report compliance status, highlighting risks, gaps, or delays
- Escalate issues proactively and ensure timely closure of audit findings
- Review and validate artifacts/evidence against audit observations
- Collaborate with internal stakeholders to ensure adherence to compliance requirements
- Build and maintain strong knowledge of NPCI ecosystem, products, and circulars
Requirements
- Strong understanding of compliance frameworks and audit principles
- Hands-on experience in managing ISO 27001, PCI DSS, PCI-SSF, PCI-PIN, ITGC, and internal audits
- Familiarity with RBI guidelines, NPCI circulars, and payment ecosystem compliance
- Strong documentation, reporting, and stakeholder management skills
- Ability to manage multiple audits and deadlines effectively
- Strong analytical and problem-solving capabilities
- Ability to work independently and collaboratively within teams
- Experience with audit tools and compliance management systems
- Familiarity with RBI-DPSC guidelines and payment industry standards
- Certifications such as ISO 27001 Lead Implementer/Auditor, CISA, or similar (good to have)
Skills Required
- 3 to 6 years of relevant experience
- BE, BTech, or equivalent education
- Strong understanding of compliance frameworks and audit principles
- Hands-on experience with ISO 27001, PCI DSS, PCI-SSF, PCI-PIN, ITGC, and internal audits
- Familiarity with RBI guidelines, NPCI circulars, and payment ecosystem compliance
- Strong documentation, reporting, and stakeholder management skills
- Ability to manage multiple audits and deadlines effectively
- Strong analytical and problem-solving capabilities
- Ability to work independently and collaboratively
- Experience with audit tools and compliance management systems
- Familiarity with RBI-DPSC guidelines and payment industry standards
- ISO 27001 Lead Implementer or Lead Auditor, CISA, or similar certification
What We Do
NPCI is an umbrella organisation for all retail payment systems in India. It was set up with the support & guidance from Reserve Bank of India (RBI) & Indian Banks Association (IBA). A registered company under Section 8 of the Companies Act, 2013. Watch the NPCI Corporate AV - https://youtu.be/RGl9YQ6CB20 Products & Services Unified Payments Interface Unique payment solution which empowers a recipient to initiate the payment request from a smartphone. It facilitates 'virtual payment address' as a payment identifier for sending & collecting money & works on single click 2 factor authentication. Immediate Payment Service A 24X7, real time, cost effective, independent channel, retail payment service, introduced by NPCI, empowering customers to transfer money instantly with banks & RBI authorised PPIs across India. RuPay Robust card scheme designed to offer payment products with superior features & processes specifically designed to cater to diverse consumer needs. *99# USSD based mobile banking platform that makes banking services accessible to all the bank account holders on their mobile phones. National Automated Clearing House Centralised payment system developed with an aim to consolidate multiple ECS systems running across the country & provide a framework for the removal of local barriers/inhibitors. Aadhaar Enabled Payment System Bank led model which allows online financial inclusion transactions at micro-ATMs through the business correspondent of any bank using the Aadhaar authentication. e-KYC Electronic way of conducting authentic & real time KYC of a customer using Aadhaar authentication. Cheque Truncation System Electronic image of the cheque is transmitted to the drawee bank by the clearing house, along with relevant information. National Financial Switch Facilitates routing of ATM transactions through inter-connectivity between its member institutions thereby enabling the citizens of the country to utilise any ATM of a connected entity
