Security Compliance Specialist

Cashfree Payments India Private Limited; Bengaluru; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

Cashfree Payments India Private Limited is seeking a Security Compliance Specialist to join the GRC team. You will ensure adherence to PCI DSS and RBI regulations, align with GDPR and global frameworks, and drive audits and certification processes.

The role requires translating complex standards into actionable internal processes across fintech operations. The ideal candidate has 1–3 years in IT security compliance, strong documentation skills, and the ability to influence cross-functional teams

Qualifications

• Bachelor’s degree in Computer Science or Information Security.
• 1–3 years of IT security compliance experience, fintech preferred.
• Familiarity with PCI DSS, ISO 27001, SOC 2, GDPR and RBI/Cert-In.
• Experience coordinating audits with external certifying bodies.

Responsibilities

• Lead compliance efforts with cybersecurity and data protection standards.
• Develop audit strategies and manage internal controls.
• Advise senior leadership on governance and risk mitigation.
• Collaborate with Engineering, Product, Operations to embed controls.
• Coordinate internal and external audits and track remedial actions.
• Deliver compliance training and raise awareness across the org.
• Maintain documentation and support certification renewals.
• Monitor regulatory changes and adapt compliance programs.

Skills

IT Security Compliance

PCI DSS

Regulatory understanding

Audit management

Cross-functional collaboration

Documentation & reporting

DevOps security in agile

Communication skills

Education

Bachelor's degree in CS/IS/Engineering

Master's degree preferred

Job description

We are looking for a motivated and detail-oriented Security Compliance Specialist to join our dynamic Governance, Risk, and Compliance (GRC) team. In this role, you will play a pivotal part in ensuring Cashfree’s adherence to critical industry standards and regulatory frameworks including PCI DSS , and other applicable cybersecurity and compliance directives. You will work closely with cross-functional teams, driving a strong compliance culture and supporting risk mitigation across our fintech operations.

This position offers an exciting opportunity to lead compliance initiatives in a fast-paced, innovative fintech environment, ensuring that internal controls, audits, and external certifications are handled with precision and strategic insight.

Who You Are

You are ideally suited for this role if you have a strong background in IT and Cloud security compliance, enjoy collaborating with both technical and business teams, and excel at translating complex regulatory requirements into actionable internal processes. You thrive in a high-growth environment and are passionate about strengthening the compliance posture of a cutting-edge fintech company.

Key Responsibilities

• Lead and manage compliance efforts with relevant cybersecurity and data protection standards such as PCI DSS, NBFC RBI Regulations, GDPR , industry regulations, and other global or national compliance frameworks.

• Develop, implement, and manage internal audit strategies, ensuring effective risk management and strong internal controls.

• Serve as a key advisor to senior leadership on compliance and governance issues, supporting the design of risk mitigation strategies.

• Collaborate with Engineering, Product, Operations, and other teams to ensure controls are effectively integrated and monitored across systems and processes.

• Conduct internal audits, support external audits and certifications, and ensure timely closure of findings with validated remedial actions.

• Identify and assess compliance risks, elevate issues appropriately, and track risk mitigation efforts.

• Deliver compliance training programs and promote awareness throughout the organization, embedding compliance into daily operations.

• Coordinate with external auditors, certifying bodies, and regulators for periodic audits and ensure timely reporting and certification renewals.

• Continuously improve compliance processes and methodologies, incorporating best practices and adapting to evolving regulatory landscapes.

Qualifications and Skills:

• 1 to 3 years of experience in IT Security Compliance, preferably within the fintech, payments, or financial services sectors.

• Solid understanding of PCI DSS , information security standards, and broader IT compliance frameworks (e.g., ISO 27001, SOC 2, GDPR,RBI & Cert-In etc.).

• Proven track record of managing audits and compliance programs, including interaction with external auditors and certifying bodies.

• Strong knowledge of security controls, risk assessments, and compliance monitoring in technology-driven environments.

• Excellent communication and interpersonal skills, with experience in influencing cross-functional teams and senior stakeholders.

• Detail-oriented with strong analytical and documentation skills.

• Familiarity with agile methodologies and applying compliance in agile and DevOps environments.

Certifications Required:

• One or more of the following certifications:

Educational Background:

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field.

• A Master's degree in a relevant discipline is preferred.