Lead Ecosystem Compliance

Role & responsibilities

• Responsibilities Oversee ecosystem compliance across various NPCI products and participating entities Validate security assessment reports, including: Vulnerability Assessment (VA) Penetration Testing (PT) Configuration Audits Application Security (AppSec)
• Source Code Review Frontend and manage security audits of ecosystem entities Track and ensure data localization compliance across ecosystem partners Review and validate onboarding security assessment reports submitted by entities Manage and oversee third-party risk management processes Ensure timely closure of compliance gaps and audit observations Engage with internal and external stakeholders to maintain strong compliance governance Provide regular updates, dashboards, and escalation on compliance posture

Requirements Key Skills and Experience Required

• Strong understanding of ecosystem compliance, third-party risk, and audit frameworks Hands-on experience in reviewing VA/PT, AppSec, and security assessment reports Knowledge of data localization requirements and regulatory expectations in payments ecosystem Experience in managing security audits and compliance processes Familiarity with NPCI ecosystem, products, and partner integrations
• Strong stakeholder management and communication skills Excellent analytical and risk assessment capabilities Ability to manage multiple stakeholders and compliance activities simultaneously

Preferred Certifications such as CISA, CISSP, ISO 27001 Lead Auditor/Implementer (good to have)

Experience in BFSI / Payments domain Familiarity with RBI guidelines, PCI DSS, and security compliance frameworks