About the role

Zeta intends to replace many legacy systems in use by banks for processing payments. Banks need to leapfrog into an era of connected devices and omnipresent commerce. Banking should become an integral part of the commerce and enterprise systems, thereby enabling seamless consumer and business transactions. The average number of interactions an account holder may have with a bank would increase to 12-15 per day in the near-term from the currentaverage of 3-4 transactions per month. These could grow to an unimaginably large number in the future. Most banking systems aren’t designed for this scale. In many ways, these systems are limiting the imagination of the key stakeholders at the banks. We want this changed fundamentally, in an interoperable and regulatory compliant manner.
We build large-scale transaction processing systems that can work with many current and future payment networks. We build applications that help banks realize the value of this new approach early. We also help banks to rapidly deliver the value of these applications to their customers.
Zeta’s platform accelerates the phenomenon of digital native neobanking, unbundling and rebundling of banking and invisible payments. The platform enables the new-age financial institutes to have faster go-to-market. Enables the existing financial institutes with the much-required capabilities to partner with the FinTechs and to offer a suite of modern banking experiences.
Zeta is founded by Bhavin Turakhia and Ramki Gaddipati. Bhavin has also been the Founder/Co-Founder of Directi, Radix, Ringo, Codechef, and Flock. Zeta products have been recognized as the Best Prepaid Card in 2018. Zeta is recognized as the Fastest Growing Company of the Year, Fin-tech Rising Star Award, and India’s Most Innovative Top 50 Product Companies by various trade journals. Zeta is a PCI DSS/3DS, ISO 27001 and SOC 2 company.
Zeta has been valued at $1.45 billion in a recent fundraising round. Zeta’s platform is in use by 3 million users and by financial institutes across 7 countries.
As a Cloud Security Professional, you will be playing a pivotal role in enabling Zeta in detecting and mitigating various vulnerabilities and automating the process at an early stage and making sure infrastructure and applications are secure. You will work with an amazing peer group that fuels this ambition.What is the role?

This role is part of the Information Security Process and Compliance Team of Zeta. The Sr. Associate of InfoSec Audit and compliance is responsible for preparing and supporting PCIDSS, ISO 27001 and SOC external Audits. Actively participate, strengthen and improve Internal Audit process and provide assurance on internal technology and process compliance. Collaborate with the Cloud and Product security team to drive Risk and compliance goals.

Who should apply for this role?

4 - 7 years of experience in Information Security and Compliance in medium to

large-sized companies.

Bachelor of Technology (BE/B.Tech), M.Tech or ME in Computer Science, MCA or equivalent.

Good Understanding of Technology Risk Assessment Frameworks and Application risk Assessment.

Good Understanding and hands on experience on PCI DSS Standard and various PCI compliance is must.

Experience of working in the Banking or Payment sector is preferred.

Hands-on experience with various Audits and Standards Such as SSAE 18, ISO 27001,ISO 31000, ISO 22301, CSA Star, NIST Risk framework, PCI DSS, PCI 3DS, PCI PA-DSS/SSF etc.

Good to have Information Security Certifications like CISA, CISM, CISSP etc.

Experience of Vendor Risk Assessment and responding to client Request for Proposal(RFP).

Excellent written and oral communication and penchant for technical documentation

What does the Division do?

Responsible for Information Security Process and compliance

Perform regular customer Audits and Internal Audits

Conduct Cyber Risk Assessment along with Product and Cloud security Engineer

Govern, Drive achieve clean report from Cloud and Product Security team for IVA(Quarterly Reports) - ASV (Quarterly Reports) - IPT (yearly) - EPT (yearly) - ApplicationPT (yearly)

Build organizational level Infosec policies, standards, process and procedure.

Educate everyone at Zeta on Infosec best practices through IS Policy and Standards,

Security awareness and build Risk aware culture.

What are your responsibilities?

Works with internal and external stakeholders to assess the IT architecture or proposed IT architecture solutions to identify the risk areas with regards to PCI controls.

Assesses the network architecture and or reviews the Firewall rulesets, Network devices/appliances to see if they are aligned with the PCI control requirements and recommends compensatory controls where necessary.

Executes operational activities to support audit and compliance activities including technical validation processes.

Conducts PCI DSS scoping engagements, gap analysis and assessments related to securing the Cardholder Data Environment.

Effectively multi-tasks on multiple assignments and deliverables.

Actively accepts individual and team responsibilities to meet commitments. Takes responsibility for own performance and actions and demonstrates responsibility and teamwork towards overall team/department goals.

Discuss the SOP document with all relevant stakeholders - right from process owner to the BU functional heads

Detailed understanding of SOC reports (SOC2, Type 1, 2), ISMS reports and ability to relate the IT General Controls, IT Application Controls, Cyber Controls to the SOC framework.

Develop and Maintain Vendor Risk Management /Third Party Risk Management

Program including Vendor Onboarding Audit, Periodic Vendor Assessment, Maintain TPRM Database.

Review and implement controls and policies as per RBI and other regulatory requirements. Maintain ISMS framework, evaluate effectiveness of implemented controls and provides recommendations for improvement.

Facilitate Client Due - Diligence in collaboration with Business.

Develop and Maintain Enterprise Risk Assessment framework.

Perform Internal Assessment against various Standards to ensure the established policies are being followed and prepare internal reports.

Contract review and providing responses to client Request for Proposal (RFP)

In addition to the above specific responsibilities, as Sr.Associate in Information Security Process and Compliance division of Zeta, you will be responsible for:

Hiring decisions, hiring process definition, and continuous improvements.

Broad knowledge of security domain with an exposure of cloud & kubernetes vulnerabilities, secure configurations and mitigation mechanisms

Actively participate in building policies, standards and processes. Good Exposure to DevOps & DevsSecOps.

What are you accountable for?

Continuous improvement of Process and Compliance.

Assist in reviewing documentation including but not limited to security policies,processes, SOPs, third party audit/assurance reports including SOC 2, PCIAOC/ROC/COC/SAQ, ISMS, penetration testing, vulnerability scanning reports to identify gaps/exceptions.

Make sure the environment is compliant to CIS, NIST, PCI etc.

Ensure that Security Standards are being adopted by the Product Team covering both Cloud, On-Prem, SaaS, PaaS and IaaS.

Senior Associate - Audit and Compliance

About the role

85% of jobs are never posted