PCI & Compliance ManagementImplement, operate, and continuously improve PCI-related security controls across servers, networks, applications, andsupporting infrastructure.Lead the development and execution of an enterprise-level PCI compliance strategy and roadmap, aligned with businessgoals.Coordinate and manage internal and external PCI audits, acting as the primary liaison with auditors, regulators, and otherstakeholders.Track audit findings, coordinate remediation efforts, and ensure timely closure to maintain PCI compliance reports andattestations.Manage compliance activities related to PCI DSS, PCI CP&P, PCI SSF, PCI MPOC, PCI PIN, PCI P2PE, and other applicablestandards.Ensure all new products, software releases, TPP, Back Office, Data Centers, and Perso Bureau processes comply with PCIrequirements by design.Maintain and manage Cardholder Data Environment (CDE) mapping to define scope and control coverage.Security Scanning & Vulnerability ManagementTrack and maintain all PCI-mandated security scanning requirements, including internal, external, and applicationvulnerability scans.Ensure scan reports are compliant, reviewed, and submitted before defined deadlines.Work with IT, infrastructure, and application teams to remediate identified vulnerabilities and validate closure.Maintain documentation and evidence for scanning, remediation, and compliance verification.Infrastructure, Server & VM SecuritySupport secure management, configuration, hardening, patching, and access control of servers and machinesAssist with secure deployment and maintenance of on-prem and cloud environments in compliance with security andregulatory standards.Network & Endpoint SecuritySupport firewall configuration and change management, including periodic rule reviews and access control monitoring.Manage solutions, review alerts, support investigations, and escalate incidents as necessary.Assist in endpoint security hardening and malware protection strategies.Identity & Access ManagementProvide Active Directory and IAM support, including user access reviews, group management, privilege control, andenforcement of security policies.Ensure logical and physical access controls align with PCI, PCI-CP&P and other compliance requirements.Support physical access control systems, visitor management, and secure media/document handling.Physical Security OperationsOversee CCTV monitoring, access control systems (badges, biometrics, mantraps), and secure entry points.Ensure proper handling, storage, and disposal of physical media and sensitive documents.Incident Management & ResponseParticipate in detection, analysis, and response to security incidents.Investigate alerts, firewall, and monitoring tools; coordinate containment, remediation, and recovery.Conduct root cause analysis and implement corrective/preventive controls.[Type here]OMA/HRD/D01/22-V0Maintain incident documentation and support testing of incident response plans and playbooks.Policies, Audits & DocumentationMaintain, review, and update information security policies, procedures, standards, and audit documentation.Support SOC 2, ISO/IEC 27001, and other compliance audits with evidence, control mapping, and documentation updates.Ensure all compliance documentation is accurate, audit-ready, and aligns with regulatory and business requirements.Security Awareness & TrainingConduct PCI and information security awareness training for employees and contractors.Maintain training records and evidence for audits.Promote a culture of security and compliance across all business units.Vendor & Third-Party ManagementManage PCI complianceConduct due diligence, monitor compliance status, and ensure contractual and regulatory obligations are met.Risk Management & Continuous ImprovementIdentify PCI risks, conduct risk assessments, and implement mitigation plans.Continuously improve PCI controls and processes based on audit findings, incidents, and emerging threats.Provide recommendations for business, infrastructure, and application improvements to strengthen security posture.Reporting & GovernancePrepare and present PCI compliance metrics, dashboards, and reports for executive management.Track key PCI KPIs: audit findings, vulnerability remediation, training completion, and third-party compliance status.Serve as a subject matter expert to leadership on PCI compliance trends, regulatory updates, and best practices.Knowledge & Skills Required:Strong knowledge of PCI DSS, PCI CP&P, PCI SSF, PCI MPOC, PCI PIN, PCI P2PE, SOC 2, ISO/IEC 27001.Hands-on understanding of:o Server and VM management (Windows/Linux)o Infrastructure security and system hardeningo Firewall technologies and network securityo EDR/XDR solutionso Active Directory and identity access managemento Vulnerability management and remediationExperience in audit coordination, compliance reporting, and third-party risk management.Strong documentation, communication, and cross-functional collaboration skills.Knowledge of regulatory requirements for payment services (RBI, PSD2, etc.) preferred.Certifications preferred: PCIP, QSA, CISSP, CISM, CISA.