Security Compliance Lead

About the company - Credit cards haven't changed much for over half a century so our team of seasonedbankers, technologists, and designers set out to redefine the credit card for you - theconsumer. The result is OneCard - a credit card reimagined for the mobilegeneration. OneCard is India's best metal credit card built with full-stack tech. It isbacked by the principles of simplicity, transparency, and giving back control to theuser.The Engineering Challenge“Re-imaging credit and payments from First Principles”Payments is an interesting engineering challenge in itself with requirements of lowlatency, transactional guarantees, security, and high scalability. When we add creditand engagement into the mix, the challenge becomes even more interesting withunderwriting and recommendation algorithms working on large data sets. We haveeliminated the current call center, sales agent, and SMS-based processes with amobile app that puts the customers in complete control. To stay agile, the entirestack is built on the cloud with modern technologies.Check out our apps here:OneCard (Best credit card app) : [hidden] (5 million downloads): [hidden] Compliance LeadOpportunity:Opportunity to build GRC practice grounds up for new Age Fintech startup, lead andimplement PCI-DSS, ISO-27001, RBI compliancesWhat you will do:● Be SME for all applicable regulations, guidelines and industry best practicesto manage risk and ensure compliance.● Be the single point of contact for all external entities related to Security andCompliance communications.● Owner for all security documentation such as policies, standards, andprocedures.● Owner for driving security controls across all organisation functions.● Build continuous assessment practice which is superset of all requiredregulatory compliance.● Manages and supports Information Security Risk Management Life-cycle forthe organization.● Provide adequate security and compliance against specific standards such asNIST 800-53, NIST 800-171, ISO 27001, SOX, PCI, HIPAA and otherregulatory requirements.● Identifies and formally documents deviations from published standards,estimates risk level, recommends appropriate mitigation countermeasures inoperational and non-operational situations.● Identify potential areas of IT compliance vulnerability and risk; guide theaccountable stakeholders to develop/implement corrective action plans forresolution, and provide general guidance on how to avoid or deal with similarsituations in the future. Risks should be identified, assessed and monitored onan ongoing firm-wide and individual entity basisExperience Range:4-8 years of experience in Cybersecurity & Risk Compliance Domain in areasincluding and limited to: System Security, Network Security , SOC, Risk &Compliance ManagementTechnical Expertise:● Auditing experience in ISO-27001, SOX, NIST, PCI-DSS● Experience with AWS Security and Compliance.● Prior experience in the Banking and Financial domain is nice to have.● Proven experience in Endpoint Security, Network Security, SIEM,SOCAdvanced security tools – SOAR platform, Vulnerability Management, SIEM● Experience building Threat Modeling practice● Strong communication skills