Information Risk Manager

Kotak Mahindra Bank; Mumbai; On-site; INR 2,000,000 - 4,000,000; Full time

Job summary

Kotak Mahindra Bank is seeking a detail-oriented PCI Internal Assessor to lead PCI DSS initiatives and ensure adherence to PCI-SSF, SSLC, PIN, and P2PE across the organization. You will drive risk assessments, develop policies, and coordinate with IT, security, and business units to maintain strict data protection standards.

The role requires 6+ years of PCI experience in BFSI, strong cybersecurity knowledge, and effective communication skills to interact with auditors and vendors.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field.
• 6+ years of experience in PCI compliance and information security, preferably BFSI.
• Strong understanding of PCI requirements and cybersecurity principles.
• Experience with security tools such as antivirus, firewalls, and SIEM (Qualys, Nessus).
• Excellent communication and project management skills.

Responsibilities

• Lead PCI compliance initiatives across the organization.
• Conduct risk assessments and gap analyses to identify vulnerabilities in PCI scope.
• Develop and implement policies and procedures to meet PCI standard requirements.
• Collaborate with IT, security, and business teams to ensure compliance and stakeholder management.
• Monitor systems and processes for ongoing PCI adherence.
• Coordinate with external auditors and vendors for PCI assessments.
• Provide training and awareness programs for staff on PCI compliance.
• Maintain documentation and reporting for audits and reviews.
• Proactive, self-motivated candidate.

Skills

PCI compliance

Information security

Project management

Cybersecurity principles

Security tools

Communication

Education

Bachelor’s degree in Information Security

Bachelor’s degree in Computer Science

Tools

Qualys

Nessus

SIEM

Firewall

Antivirus

Job description

We are seeking a detail-oriented and experienced PCI Internal assessor to ensure our organization adheres to the various Payment Card Industry standards such as PCI DSS. PCI-SSF, SSLC, PIN, P2PE. This role is critical in safeguarding cardholder data and maintaining the integrity of our payment systems.

Key Responsibilities:

• Lead and manage PCI compliance initiatives across the organization.
• Conduct regular risk assessments and gap analyses to identify vulnerabilities in PCI scope applications.
• Develop and implement policies and procedures to meet PCI standard requirements.
• Collaborate with IT, security, and business teams to ensure compliance and showcase effective stakeholder management.
• Monitor systems and processes for ongoing adherence to PCI standards.
• Coordinate with external auditors and vendors for PCI assessments.
• Provide training and awareness programs for staff on PCI compliance.
• Maintain documentation and reporting for compliance audits and reviews.
• Proactive, self-motivated candidate

Required Skills & Qualifications:

• Bachelor’s degree in Information Security, Computer Science, or related field.
• 6+ years of experience in PCI compliance & information security, preferably from BFSI background.
• Strong understanding of PCI requirements and cybersecurity principles.
• Experience with security tools such as antivirus, firewalls, and SIEM, Qualys, Nessus, etc
• Excellent communication and project management skills.

Preferred Certifications:

• CCSP, CISSP, CISA,CISM or other relevant securty certification