Sr. Associate Process & Compliance
4 skills required
Job Details
About Zeta
Zeta is a Next-Gen Banking Tech company that empowers banks and fintechs to launch banking products for the future. It was founded by Bhavin Turakhia and Ramki Gaddipati in 2015.
Our flagship processing platform - Zeta Tachyon - is the industry’s first modern, cloud-native, and fully API-enabled stack that brings together issuance, processing, lending, core banking, fraud & risk, and many more capabilities as a single-vendor stack. 20M+ cards have been issued on our platform globally.
Zeta is actively working with the largest Banks and Fintechs in multiple global markets transforming customer experience for multi-million card portfolios.
Zeta has over 1700+ employees - with over 70% roles in R&D - across locations in the US, EMEA, and Asia. We raised $280 million at a $1.5 billion valuation from Softbank, Mastercard, and other investors in 2021.
The Role:
This role is part of the Information Security Process and Compliance Team of Zeta. The Sr. Associate of InfoSec Audit and compliance is responsible for preparing and supporting PCIDSS, ISO 27001 and SOC external Audits. Actively participate, strengthen and improve Internal Audit process and provide assurance on internal technology and process compliance. Collaborate with the Cloud and Product security team to drive Risk and compliance goals.
Responsibilities
- Work with internal and external stakeholders to assess the IT architecture or proposed IT architecture solutions to identify the risk areas with regards to PCI controls.
- Assess the network architecture and or reviews the Firewall rulesets, Network devices/appliances to see if they are aligned with the PCI control requirements and recommends compensatory controls where necessary.
- Execute operational activities to support audit and compliance activities including technical validation processes.
- Conduct PCI DSS scoping engagements, gap analysis and assessments related to securing the Cardholder Data Environment.
- Effectively multi-tasks on multiple assignments and deliverables.
- Actively accepts individual and team responsibilities to meet commitments. Takes responsibility for own performance and actions and demonstrates responsibility and teamwork towards overall team/department goals.
- Discuss the SOP document with all relevant stakeholders - right from process owner to the BU functional heads Detailed understanding of SOC reports (SOC2, Type 1, 2), ISMS reports and ability to relate the IT General Controls, IT Application Controls, Cyber Controls to the SOC framework.
- Develop and Maintain Vendor Risk Management /Third Party Risk Management Program including Vendor Onboarding Audit, Periodic Vendor Assessment, Maintain TPRM Database.
- Review and implement controls and policies as per RBI and other regulatory requirements. Maintain ISMS framework, evaluate effectiveness of implemented controls and provides recommendations for improvement.
- Facilitate Client Due - Diligence in collaboration with Business.
- Develop and Maintain Enterprise Risk Assessment framework.
- Perform Internal Assessment against various Standards to ensure the established policies are being followed and prepare internal reports.
- Contract review and providing responses to client Request for Proposal (RFP)
Skills
- Good Understanding of Technology Risk Assessment Frameworks and Application risk Assessment.
- Good Understanding and hands on experience on PCI DSS Standard and various PCI compliance is must.
- Experience of working in the Banking or Payment sector is preferred.
- Hands-on experience with various Audits and Standards Such as ISMS, SSAE 18, ISO 27001,ISO 31000, ISO 22301, CSA Star, NIST Risk framework, PCI DSS, PCI 3DS, PCI PA-DSS/SSF, PCI S3 etc.
- Good to have Information Security Certifications like CISA, CISM, CISSP etc.
- Experience of Vendor Risk Assessment and responding to client Request for Proposal(RFP).Excellent written and oral communication and penchant for technical documentation
Similar Jobs
ByteDance
Seattle, Washington, United States (On-Site)
• 4 Months ago
PwC
Dublin, County Dublin, Ireland (On-Site)
• 5 Months ago
São José Dos Campos, State Of São Paulo, Brazil (Hybrid)
• 5 Months ago
Get notifed when new similar jobs are uploaded
Similar Skill Jobs
OKX
Kuala Lumpur, Federal Territory Of Kuala Lumpur, Malaysia (On-Site)
• 5 Months ago
Games For Love
Washington, United States (Remote)
• 3 Months ago
PwC
Gurugram, Haryana, India (On-Site)
• 3 Months ago
PwC
Gurugram, Haryana, India (On-Site)
• 3 Months ago
PwC
Kuala Lumpur, Federal Territory Of Kuala Lumpur, Malaysia (On-Site)
• 5 Months ago
Get notifed when new similar jobs are uploaded
Jobs in Bengaluru, Karnataka, India
ByteDance
Gurugram, Haryana, India (On-Site)
• 6 Days ago
Get notifed when new similar jobs are uploaded
Similar Category Jobs
Assystems
Gan, Laamu Atoll, Maldives (On-Site)
• 5 Months ago
PwC
Gurugram, Haryana, India (On-Site)
• 6 Months ago
Warhorse Studios
Prague, Prague, Czechia (Hybrid)
• 5 Months ago
ByteDance
Seattle, Washington, United States (On-Site)
• 5 Months ago
USE Insider
Sydney, New South Wales, Australia (On-Site)
• 5 Months ago
PwC
Warsaw, Masovian Voivodeship, Poland (Hybrid)
• 6 Months ago
Get notifed when new similar jobs are uploaded
