Senior Associate Non Regulatory Governance

The Opportunity We are looking for a Non-Regulatory Compliance to manage and support compliance across key industry standards and audit frameworks. This role is critical in ensuring adherence to ISO standards, PCI DSS, and internal audit requirements while supporting audit execution, reporting, and governance activities.

Job Details Job Title: Non-Regulatory Governance Division: Market Information Security Years of Experience: 3 to 6 years Education: BE / BTech or equivalent Employment Type: Full-time Location: Mumbai Role Type: Permanent Key Responsibilities Manage non-regulatory compliance activities, including: ISO 27001, ISO 22301 PCI DSS Internal Audits IT General Controls (ITGC) TPAP/ASP Audits Develop and maintain a compliance and audit calendar, ensuring timely execution and completion of activities Support end-to-end audit lifecycle, including preparation, execution, and closure Collect, review, and provide audit evidence and documentation Assist the Compliance Lead during internal and external audits Track and report compliance status, highlighting risks, gaps, or delays Escalate issues proactively and ensure timely closure of audit findings Review and validate artifacts/evidence against audit observations Collaborate with internal stakeholders to ensure adherence to compliance requirements Build and maintain strong knowledge of NPCI ecosystem, products, and circulars Requirements Key Skills and Experience Required Strong understanding of compliance frameworks and audit principles Hands-on experience in managing ISO 27001, PCI DSS, PCI-SSF, PCI-PIN, ITGC, and internal audits Familiarity with RBI guidelines, NPCI circulars, and payment ecosystem compliance Strong documentation, reporting, and stakeholder management skills Ability to manage multiple audits and deadlines effectively Strong analytical and problem-solving capabilities Ability to work independently and collaboratively within teams Preferred Qualifications Experience with audit tools and compliance management systems Familiarity with RBI-DPSC guidelines and payment industry standards Certifications such as ISO 27001 Lead Implementer/Auditor, CISA, or similar (good to have)