Security Compliance(PCI DSS)- Senior Security Engineer
Job Overview
-
Date PostedFebruary 14, 2023
-
Location
-
Expiration date--
Job Description
Title: Role – Security Compliance(PCI DSS)- Senior Security Engineer
About Us: Paytm is India’s leading digital payments and financial services company, which is focused on driving consumers and merchants to its platform by offering them a variety of payment use cases. Paytm provides consumers with services like utility payments and money transfers, while empowering them to pay via Paytm Payment Instruments (PPI) like Paytm Wallet, Paytm UPI, Paytm Payments Bank Netbanking, Paytm FASTag and Paytm Postpaid – Buy Now, Pay Later. To merchants, Paytm offers acquiring devices like Soundbox, EDC, QR and Payment Gateway where payment aggregation is done through PPI and also other banks’ financial instruments. To further enhance merchants’ business, Paytm offers merchants commerce services through advertising and Paytm Mini app store. Operating on this platform leverage, the company then offers credit services such as merchant loans, personal loans and BNPL, sourced by its financial partners.
Expectations/ Requirements
· 3+ years of proven experience in Security Audits (PCI DSS, PA DSS)
· Should have in-depth knowledge of Payment security standards like PCI-DSS, PA-DSS, PCI-PIN, P2PE,
· Should have knowledge of RBI security framework for wallet, NBFC, and digital products.
· Drive the implementation of new security standards i.e. SSF, 3DS
· Should have strong knowledge in encryption and key management, PKI/RKI
· Understanding mobile payment would be an advantage and security certification around it.
· Understanding of NPCI, NCMC, BBPS, and payments scheme security requirements, ISO 8583, DUKPT
· Coordinate annual external 3rd party assessments/audits, for Information security audits like PCI if required not including PCI-DSS, RBI PPI, Card Brands, etc.
· Understanding the digital security frameworks
· Maintain creation of security policies, procedures, and documentation
· Cooperate with Cyber security teams and executive management, monitor remediation plans, and execution of compliance assessments
· Perform procedures to validate implementation and risk mitigation.
· Should be capable of managing Risk Management and Vendor Management.
· Candidates should have knowledge and experience of best practice compliance and governance frameworks, methodologies and emerging practice, compliance monitoring, and risk assessments.
· Should provide functional support to internal departments in areas of compliance with regulatory bodies, dissemination of circulars issued by regulators, etc.
Superpowers/ Skills that will help you succeed in this role
High level of drive, initiative and self-motivation
● Ability to take internal and external stakeholders along
● Understanding of Technology and User Experience
● Love for simplifying
● Growth Mindset
● Willingness to experiment and improve continuously
Why join us
· Because you get an opportunity to make a difference, and have a great time doing that.
· You are challenged and encouraged here to do stuff that is meaningful for you and for those we serve.
· You should work with us if you think seriously about what technology can do for people.
· We are successful, and our successes are rooted in our people collective energy and unwavering focus on the customer, and that's how it will always be.
Compensation: If you are the right fit, we believe in creating wealth for you
With enviable 500 mn+ registered users, 21 mn+ merchants and depth of data in our ecosystem, we are in a unique position to democratize credit for deserving consumers & merchants – and we are committed to it. India’s largest digital lending story is brewing here. It’s your opportunity to be a part of the story!