Lead Ecosystem Compliance

The Opportunity
We are looking for a Lead Ecosystem Compliance to oversee and strengthen compliance across NPCI partner ecosystem. The role involves managing security assessments, audit processes, and third-party risk, ensuring adherence to compliance standards and safeguarding the integrity of NPCI products.

Job Details

• Job Title: Lead Ecosystem Compliance
• Division: Market Information Security
• Years of Experience: 6 to 9 years
• Education: BE / BTech or equivalent
• Employment Type: Full-time
• Location: Mumbai
• Role Type: Permanent

Key Responsibilities

• Oversee ecosystem compliance across various NPCI products and participating entities
• Validate security assessment reports, including:
  • Vulnerability Assessment (VA)
  • Penetration Testing (PT)
  • Configuration Audits
  • Application Security (AppSec)
  • Source Code Review
  • Frontend and manage security audits of ecosystem entities
• Track and ensure data localization compliance across ecosystem partners
• Review and validate onboarding security assessment reports submitted by entities
• Manage and oversee third-party risk management processes
• Ensure timely closure of compliance gaps and audit observations
• Engage with internal and external stakeholders to maintain strong compliance governance
• Provide regular updates, dashboards, and escalation on compliance posture

Key Skills and Experience Required

• Strong understanding of ecosystem compliance, third-party risk, and audit frameworks
• Knowledge of reviewing VA/PT, AppSec, and security assessment reports
• Knowledge of data localization requirements and regulatory expectations in payments ecosystem
• Experience in managing security audits and compliance processes
• Familiarity with NPCI ecosystem, products, and partner integrations
• Strong stakeholder management and communication skills
• Excellent analytical and risk assessment capabilities
• Ability to manage multiple stakeholders and compliance activities simultaneously

Preferred Qualifications

• Certifications such as CISA, CISSP, ISO 27001 Lead Auditor/Implementer (good to have)
• Experience in BFSI / Payments domain
• Familiarity with RBI guidelines, PCI DSS, and security compliance frameworks

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.