We are looking for a motivated and detail-oriented Security Compliance Specialist to join our dynamic Governance, Risk, and Compliance (GRC) team. In this role, you will play a pivotal part in ensuring Cashfree’s adherence to critical industry standards and regulatory frameworks including PCI DSS, and other applicable cybersecurity and compliance directives. You will work closely with cross-functional teams, driving a strong compliance culture and supporting risk mitigation across our fintech operations.

This position offers an exciting opportunity to lead compliance initiatives in a fast-paced, innovative fintech environment, ensuring that internal controls, audits, and external certifications are handled with precision and strategic insight.

Who You Are

You are ideally suited for this role if you have a strong background in IT and Cloud security compliance, enjoy collaborating with both technical and business teams, and excel at translating complex regulatory requirements into actionable internal processes. You thrive in a high-growth environment and are passionate about strengthening the compliance posture of a cutting-edge fintech company.

Key Responsibilities

• Lead and manage compliance efforts with relevant cybersecurity and data protection standards such as PCI DSS, NBFC RBI Regulations, GDPR, industry regulations, and other global or national compliance frameworks.

• Develop, implement, and manage internal audit strategies, ensuring effective risk management and strong internal controls.

• Serve as a key advisor to senior leadership on compliance and governance issues, supporting the design of risk mitigation strategies.

• Collaborate with Engineering, Product, Operations, and other teams to ensure controls are effectively integrated and monitored across systems and processes.

• Conduct internal audits, support external audits and certifications, and ensure timely closure of findings with validated remedial actions.

• Identify and assess compliance risks, escalate issues appropriately, and track risk mitigation efforts.

• Deliver compliance training programs and promote awareness throughout the organization, embedding compliance into daily operations.

• Coordinate with external auditors, certifying bodies, and regulators for periodic audits and ensure timely reporting and certification renewals.

• Continuously improve compliance processes and methodologies, incorporating best practices and adapting to evolving regulatory landscapes.

Qualifications and Skills:

• 3 to 8 years of experience in IT Security Compliance, preferably within the fintech, payments, or financial services sectors.

• Solid understanding of PCI DSS, information security standards, and broader IT compliance frameworks (e.g., ISO 27001, SOC 2, GDPR,RBI & Cert-In etc.).

• Proven track record of managing audits and compliance programs, including interaction with external auditors and certifying bodies.

• Strong knowledge of security controls, risk assessments, and compliance monitoring in technology-driven environments.

• Excellent communication and interpersonal skills, with experience in influencing cross-functional teams and senior stakeholders.

• Detail-oriented with strong analytical and documentation skills.

• Familiarity with agile methodologies and applying compliance in agile and DevOps environments.

Certifications Required:

• One or more of the following certifications:

  • CISA (Certified Information Systems Auditor)

  • CISSP (Certified Information Systems Security Professional)

  • CRISC (Certified in Risk and Information Systems Control)

  • PCI DSS Implementation Certification or equivalent.

Educational Background:

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field.

• A Master’s degree in a relevant discipline is preferred.