NC
GRC Consultant with PCI DSS
NR Consulting - India
- 🇮🇳 India
- On-site
- 1 day ago
- PCI DSS
- Swift
- ISO 27001
- SOC2
- NIST
- Devops
- Active Directory
- SCCM
- DLP
- CISSP
- CISA
- CISM
- GDPR
1 day ago
Location : Mumbai
EXP : 7+Years
Description :
Roles & Responsibilities
Hands on experience in Information Security and cybersecurity standards (PCI DSS, SWIFT CSP, ISO 27001:2022, ISO 27701, SOC2 etc).
Develop and implement cybersecurity standards, procedures. And guidelines for multiple cybersecurity standards (PCI DSS, SWIFT CSP, ISO 27001:2022, ISO 27701, SOC2 etc).
Analyse security requirements, perform risk assessments, and identify potential vulnerabilities within IT systems.
Should be adept at conducting gap analysis, risk assessments to identify threat and vulnerabilities based on NIST, ISO. PCI DSS, SWIFT frameworks.
Analyse Cardholder data flows (Business and application data flows) and accordingly identify the risks to cardholder data, provide guidance to clients on PCI DSS awareness.
Conduct regular PCI DSS audits to ensure secure payment transactions and adherence to PCI DSS Standard.
Work independently or collaborate with teams to collect, analyse, consolidate evidence of clients PCI DSS compliance, should have written or supported in writing Client and ROC's.
Conduct current-state assessment of data flows to identify sensitive datasets requiring obfuscation.
Develop a comprehensive data obfuscation framework including governance model, workflows, and control points.
Deliver documentation, playbooks, and knowledge transfer to internal stakeholders for long-term sustainability.
Provide guidance on tool selection and integration within existing data management and DevOps environments.
Establish validation and monitoring controls to ensure data integrity and protection effectiveness.
Should be able to understand and explain technical vulnerabilities.
Intermediate knowledge on Active directory, firewalls, routers, switches, SCCM, MacAfee security products, DLP, Secure coding practices and product security
Must Have Skills :
Excellent communication and presentation skills.
Able to effectively interact with various functions.
Good to have Skills / Certification Minimum:
PCI DSS QSA, PCIP, or PCI ISA, ISO27001:2022, ISO 27701, ISO 22301 Lead Auditor or implementor course
Good to have:
PCI DSS QSA, PCIP, or PCI ISA, CISSP, CISA, CISM, ISO22301
Qualification: BE/ BTech, MCA, MBA with specialization in Information Security
Critical Thinking: Analysing information, problem-solving, and making informed judgments.
Collaboration skills: Working effectively with legal, IT, engineering, and business teams
Education Qualification: B-Tech, BCA, MCA, BE-Computer science, MBA – Information Technology, or specialization in Information security
Compliance Frameworks: Deep knowledge of PCI DSS, SWIFT CSP, NIST CSF, ISO 27001, GDPR.
GRC Consultant with PCI DSS · NR Consulting - India