Cybersecurity GRC Consultant(PCI DSS)

Atos; Navi Mumbai; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Atos SE in Navi Mumbai is looking for a Cybersecurity Expert to develop and implement cybersecurity standards and guidelines. The role includes conducting PCI DSS audits, performing risk assessments, and ensuring compliance with industry standards. Required qualifications include PCI DSS certification and a relevant degree in Information Technology or Cybersecurity. The position calls for excellent communication and collaboration skills to work with various teams and stakeholders.

Qualifications

• Must have PCI DSS QSA, PCIP, or PCI ISA; ISO 27001:2022; ISO 27701.
• Good to have CISSP, CISA, CISM.

Responsibilities

• Develop and implement cybersecurity standards and guidelines.
• Analyse security requirements and perform risk assessments.
• Conduct PCI DSS audits and ensure compliance.
• Deliver documentation and knowledge transfer to stakeholders.

Skills

Information Security

Cybersecurity standards compliance

Risk assessments

Communication skills

Collaboration skills

Technical knowledge in cybersecurity tools

Education

B-Tech, BCA, MCA, BE-Computer Science, MBA – Information Technology

Job description

About Atos Group

Atos Group is a global leader in digital transformation with c. 63,000 employees and annual revenue of c. €8 billion, operating in 61 countries under two brands — Atos for services and Eviden for products. European number one in cybersecurity, cloud and high performance computing, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is the brand under which Atos SE (Societas Europaea) operates. Atos SE is listed on Euronext Paris.

The purpose of Atos Group is to help design the future of the information space. Its expertise and services support the development of knowledge, education and research in a multicultural approach and contribute to the development of scientific and technological excellence. Across the world, the Group enables its customers and employees, and members of societies at large to live, work and develop sustainably, in a safe and secure information space.

Responsibilities

• Hands on experience in Information Security and cybersecurity standards (PCI DSS, SWIFT CSP, ISO 27001:2022, ISO 27701, SOC2, etc.)
• Develop and implement cybersecurity standards, procedures, and guidelines for multiple cybersecurity standards (PCI DSS, SWIFT CSP, ISO 27001:2022, ISO 27701, SOC2, etc.)
• Analyse security requirements, perform risk assessments, and identify potential vulnerabilities within IT systems.
• Conduct gap analysis and risk assessments to identify threats and vulnerabilities based on NIST, ISO, PCI DSS, and SWIFT frameworks.
• Analyse cardholder data flows (business and application data flows) and identify risks to cardholder data, providing guidance to clients on PCI DSS awareness.
• Conduct regular PCI DSS audits to ensure secure payment transactions and adherence to PCI DSS Standard.
• Collect, analyse, and consolidate evidence of clients PCI DSS compliance; write or support the creation of AOC and ROC documentation.
• Conduct current-state assessment of data flows to identify sensitive datasets requiring obfuscation.
• Develop a comprehensive data obfuscation framework including governance model, workflows, and control points.
• Deliver documentation, playbooks, and knowledge transfer to internal stakeholders for long-term sustainability.
• Provide guidance on tool selection and integration within existing data management and DevOps environments.
• Establish validation and monitoring controls to ensure data integrity and protection effectiveness.
• Understand and explain technical vulnerabilities.
• Intermediate knowledge of Active Directory, firewalls, routers, switches, SCCM, McAfee security products, DLP, secure coding practices, and product security.

Skills and Qualifications

• Excellent communication and presentation skills.
• Ability to effectively interact with various functions.
• Must have: PCI DSS QSA, PCIP, or PCI ISA; ISO 27001:2022; ISO 27701; ISO 22301 Lead Auditor or implementor course.
• Good to have: PCI DSS QSA, PCIP, or PCI ISA; CISSP, CISA, CISM; ISO22301.
• Education: B-Tech, BCA, MCA, BE-Computer Science, MBA – Information Technology or specialization in Information Security.
• Critical thinking: analysing information, problem solving, and making informed judgments.
• Collaboration skills: working effectively with legal, IT, engineering, and business teams.
• Deep knowledge of PCI DSS, SWIFT CSP, NIST CSF, ISO 27001, GDPR.