6+ PCI DSS Jobs in India

Job Summary

We are looking for an Information Security & Compliance Officer to own and drive information security governance, risk management, audit readiness, compliance execution, and cybersecurity coordination.

The person will maintain compliance readiness across ISO 27001, PCI DSS, DL-SAR, CICRA, bank/partner audits, RBI requirements, Digital Lending Guidelines, and data protection requirements, while supporting readiness for ISO 27701, SOC 2 Type 2, DPDP, and other future compliance needs.

Responsibilities

·      Own and drive information security governance, risk management, compliance, and audit readiness.

·      Manage the audit and compliance calendar, including bank audits, regulatory reviews, partner reviews, security questionnaires, and external assessments.

·      Maintain audit and compliance readiness for ISO 27001, PCI DSS, DL-SAR, CICRA, RBI Cyber Security Framework, Digital Lending Guidelines, DPDP/data privacy, and other applicable requirements.

·      Maintain policies, procedures, risk registers, audit evidence, compliance trackers, security documentation, and closure reports.

·      Conduct and coordinate internal reviews for access control, privileged access, policy compliance, vendor security, cloud security, and security configurations.

·      Coordinate VAPT, source code reviews, cloud security reviews, configuration reviews, SAST/DAST activities, and remediation tracking.

·      Work with Technology, DevOps, IT, Compliance, HR/Admin, vendors, and business teams to close vulnerabilities, audit findings, security gaps, incidents, and risks.

·      Own and drive security incident response execution, including escalation coordination, RCA tracking, corrective actions, evidence documentation, closure reports, and periodic drills.

Required Skills

·      Good understanding of information security, GRC, IT risk, audits, compliance, and cybersecurity controls.

·      Working knowledge of application security, API security, cloud security, IAM, vulnerability management, incident response, secure SDLC, and vendor security.

·      Understanding of ISO 27001, PCI DSS, RBI Cyber Security Framework, Digital Lending Guidelines, banking/fintech requirements, and data protection requirements.

·      Ability to assess technical security risks, define controls, and coordinate remediation with technical teams.

·      Strong audit handling, evidence management, documentation, communication, follow-up, and ownership.

·      Ability to work independently with auditors, banks, vendors, technical teams, and business stakeholders.

Required Qualification

·      3–8 years of experience in information security, GRC, IT risk, cybersecurity coordination, audit, or compliance.

·      Experience handling bank audits, regulatory audits, ISO 27001, PCI DSS, VAPT coordination, access reviews, risk registers, audit evidence, and remediation tracking is preferred.

·      Experience in fintech, banking, NBFC, payments, lending, or regulated technology environments is preferred.

·      Bachelor’s degree in Computer Science, IT, Information Security, or a related field.

Relevant certification preferred, such as ISO 27001 LA/LI, CISA, CISM, PCI DSS, ISO 27701, Security+, CEH, or equivalent.

About NonStop io Technologies

NonStop io Technologies is a value-driven company with a strong focus on process-oriented software engineering. We specialize in Product Development and have a decade's worth of experience in building web and mobile applications across various domains. NonStop io Technologies follows core principles that guide its operations and believes in staying invested in a product's vision for the long term. We are a small but proud group of individuals who believe in the 'givers gain' philosophy and strive to provide value in order to seek value. We are committed to and specialize in building cutting-edge technology products and serving as trusted technology partners for startups and enterprises. We pride ourselves on fostering innovation, learning, and community engagement. Join us to work on impactful projects in a collaborative and vibrant environment.

Brief Description

We are looking for a skilled DevSecOps Engineer who can help design, automate, and secure cloud-native platforms for healthcare and life sciences clients. The ideal candidate will have hands-on experience with cloud security, infrastructure automation, CI/CD pipelines, compliance controls, and platform operations in regulated environments.

You will work closely with engineering teams, architects, security stakeholders, and client representatives to build secure-by-design systems that meet healthcare security and compliance requirements. Experience supporting AI/ML platforms, healthcare data platforms, or regulated workloads is highly desirable.

Roles and Responsibilities

• Design and implement security controls aligned with healthcare regulations, including HIPAA, HITRUST, and industry security best practices
• Ensure secure handling of Protected Health Information (PHI), Personally Identifiable Information (PII), and sensitive healthcare datasets
• Support client security reviews, vendor assessments, penetration testing remediation, and compliance audits
• Partner with engineering teams to establish secure SDLC practices and shift-left security initiatives
• Implement cloud governance policies, security baselines, and compliance automation across multiple client environments
• Build and maintain audit-ready logging, monitoring, and evidence collection mechanisms
• Support disaster recovery, business continuity, and security incident response processes
• Collaborate with healthcare product teams working on FHIR APIs, healthcare integrations, clinical applications, genomics platforms, or AI-enabled healthcare solutions
• Experience working with healthcare, life sciences, biotech, genomics, digital health, or regulated SaaS platforms is strongly preferred
• Understanding of PHI, PII, healthcare security controls, and healthcare compliance requirements
• Familiarity with healthcare interoperability standards such as FHIR, HL7, SMART on FHIR, or healthcare APIs is a plus
• Experience securing healthcare data platforms, analytics environments, AI/ML workloads, or regulated cloud environments is highly desirable
• Ability to work directly with client stakeholders and communicate security risks, recommendations, and remediation plans
• Experience participating in security assessments, audits, compliance reviews, and client-facing technical discussions
• Strong documentation and security governance skills

Requirements

• 4–7 years of experience in DevOps, DevSecOps, SRE, or Platform Engineering
• Strong experience with AWS, Azure, or GCP and cloud security best practices
• Hands-on experience with CI/CD tools such as Jenkins, GitHub Actions, GitLab CI, or Azure DevOps
• Experience with security tools, including SonarQube, Snyk, Checkmarx, Fortify, Veracode, or similar platforms
• Strong understanding of vulnerability management, IAM, threat detection, and security scanning
• Experience implementing compliance controls aligned with one or more of the following frameworks:
• HIPAA
• HITRUST
• SOC 2
• ISO 27001
• NIST Cybersecurity Framework
• PCI-DSS (where applicable)
• FDA-regulated software environments (preferred)
• Proficiency with Terraform, CloudFormation, ARM, Docker, Kubernetes, Linux, and shell scripting
• Experience with monitoring and observability tools such as Prometheus, Grafana, ELK, or Datadog
• Exposure to MLOps/AI platforms, model deployment, or AI workload management is desirable
• Strong troubleshooting, automation, networking, and cloud security skills

Why Join Us?

• Opportunity to work on a cutting-edge healthcare product
• A collaborative and learning-driven environment
• Exposure to AI and software engineering innovations
• Excellent work ethic and culture

If you're passionate about technology and want to work on impactful projects, we'd love to hear from you!

MERN Stack Expertise: Strong hands-on experience with MongoDB, Express.js, React.js, and Node.js.

Frontend Skills: Proficiency in React (Hooks, Redux, Context API), JavaScript (ES6+), TypeScript, HTML5, CSS3, Tailwind/Bootstrap.

Backend & APIs: Building scalable microservices, REST/GraphQL APIs, authentication & authorization flows.

Database & Cloud: Expertise in NoSQL (MongoDB) and deployment on AWS/GCP/Azure with CI/CD pipelines.

Fintech/Payments Domain:

• Payment Gateway Integrations (Razorpay, Cashfree, PayU, CCAvenue, BillDesk).
• Banking APIs (UPI, IMPS, NEFT, RTGS, NACH) for Pay-In / Payout solutions.
• Knowledge of reconciliation, settlements, fraud detection, KYC/AML, PCI-DSS compliance.

Gaming Domain Exposure (Preferred):

• In-app purchase systems, wallets, tokens/credits, reward points.
• Real-time payment flows in multiplayer or gaming platforms.

Problem Solving: Ability to design, develop, and deploy independently from Day 1 with minimal supervision.

Job Title: Audit Specialist

Location: Noida 63

Experience Required: 2-5 years

Employment Type: Full-Time

We are seeking a detail-oriented Audit Specialist to join our compliance team. The ideal candidate will have experience in auditing and ensuring compliance with PCI DSS, ISO 27001, ISO 9001, SOC 2, and other regulatory frameworks. You will conduct internal audits, manage compliance processes, and collaborate with teams to ensure alignment with regulations.

Key Responsibilities:

• Conduct internal audits for PCI DSS, ISO 27001, ISO 9001, and other compliance frameworks.
• Develop and implement audit plans and ensure regular assessments.
• Identify compliance gaps, document findings, and recommend corrective actions.
• Prepare detailed audit reports and track remediation progress.
• Assist with external audits and liaise with regulatory bodies.
• Provide training on compliance best practices.
• 
  

Required Skills & Qualifications:

• Strong knowledge of compliance standards (PCI DSS, ISO 27001, ISO 9001, SOC 2, etc.).
• Experience in internal and external auditing, risk assessment, and compliance processes.
• Strong analytical, problem-solving, and communication skills.
• Preferred certifications: CISA, CISM, ISO 27001 Lead Auditor, CRISC (not mandatory).

Job Title : Principal Software Architect – AI/ML & Product Innovation

Location : Bangalore, Karnataka & Trichy, Tamilnadu, India (No remote work available)

Company : Zybisys Consulting Services LLP

Reports To : CEO

Job Type : Full-Time

Experience Required: Minimum of 10+ years in software development, with at least 5 years in software architect role.

About Us:

At Zybisys, we’re not just another cloud hosting and software development company—we’re all about pushing boundaries in the FinTech world. We don’t just solve problems; we rethink how businesses operate, making things smoother, smarter, and more efficient. Our tech helps FinTech companies stay ahead in the digital game with confidence and flexibility.

Innovation is in our DNA, and we’re always on the lookout for bold thinkers who can tackle big challenges with creativity and precision. At Zybisys, we believe in growing together, nurturing talent, and building a future where technology transforms the way FinTech works.

Role Overview:

We're looking for a Principal Software Architect who’s passionate about AI/ML and product innovation. In this role, you’ll be at the forefront of designing and building smart, AI-driven solutions that tackle complex business challenges. You’ll work closely with teams across product, development, and research to shape our tech strategy and ensure everything aligns with our next-gen platform. If you love pushing the boundaries of technology and driving real innovation, this is the role for you!

Key Responsibilities:

• Architect & Design: Architect, design, and develop large-scale distributed cloud services and solutions with a focus on AI/ML, high availability, scalability, and robustness. Design scalable and efficient solutions, considering factors such as performance, security, and cost-effectiveness.
• AI/ML Integration: Spearhead the application of AI/ML in solving business problems at scale. Stay at the forefront of AI/ML technologies, trends, and industry standards to provide cutting-edge solutions
• Product Roadmap : Work closely with Product Management to set the technical product roadmap, definition, and direction. Analyze the current technology landscape and identify opportunities for improvement and innovation.
• Technology Evaluation: Evaluate different programming languages and frameworks to determine the most suitable ones for project requirements
• Component Design: Develop and oversee the creation of modular software components that can be reused and adapted across different projects.
• UI/UX Collaboration: Work closely with design teams to craft intuitive and engaging user interfaces and experiences.
• Project Oversight: Oversee projects from initiation to completion, creating project plans, defining objectives, and managing resources effectively
• Team Mentorship: Guide and inspire a team of engineers and designers, fostering a culture of continuous learning and improvement.
• Innovation & Ideation: Champion the generation of new ideas for product features, staying ahead of industry trends and customer needs.
• Research & Development: Leading initiatives that explore new technologies or methodologies.
• Strategic Planning: Participating in high-level decisions that shape the direction of products and services.
• Industry Influence: Representing the company in industry forums or partnerships with academic institutions.
• Open-Source Community Handling: Manage and contribute to the open-source community, fostering collaboration, sharing knowledge, and ensuring adherence to open-source best practices.

Qualifications:

• Experience: Minimum of 10 years in software development, with at least 5 years in a scalable software architect role.
• Technical Expertise: Proficient in software architecture, AI/ML technologies, and UI/UX principles.
• Leadership Skills: Proven track record of mentoring teams and driving cross-functional collaboration.
• Innovative Mindset: Demonstrated ability to think creatively and introduce groundbreaking ideas.
• Communication: Excellent verbal and written skills, with the ability to engage effectively with both technical and non-technical stakeholders.
• Education: Bachelor's or Master's degree in Computer Science, Engineering, or a related field.

What We Offer:

• A dynamic work environment where your ideas truly matter.
• Opportunities to attend and speak at industry conferences.
• Collaboration with cutting-edge technology and tools.
• A culture that values innovation, autonomy, and personal growth.

• Establish, implement and monitor a strategic, comprehensive enterprise information security and IT risk management program
• Work directly with the business units to facilitate risk assessment and risk management processes
• Develop and enhance an information security management framework
• Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services
• Provide leadership to the enterprise's information security organization
• Partner with business stakeholders across the company to raise awareness of risk management concerns
• Assist with the overall business technology planning, providing a current knowledge and future vision of technology and systems
• Conduct regular internal audits in compliance with applicable legal and contractual requirements, ISO 27001 and PCI DSS requirements and companies internal requirements
• Conduct regular Management reviews and update the management on information security aspects. The MRMs shall also focus on drawing Management attentions to the key areas for required management actions.
• CISO is also responsible to ensure customer audits as well as re-certification and surveillance audits and successful.
• Coordinate with relevant stakeholders to address the NC closures.
• CISO shall ensure the information incidents are responded and resolved on time to ensure compliance with legal and contractual requirements.

• Degree in business administration or a technology-related field required.
• Professional security management certification
• Minimum of 5 years of experience in a combination of risk management, information security and IT jobs
• Knowledge of common information security management frameworks, such as ISO/IEC 27001, and PCI DSS.
• Excellent written and verbal communication skills and high level of personal integrity
• Innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams
• Experience with contract and vendor negotiations and management including managed services.
• Specific experience in Agile (scaled) software development or other best in class development practices.
• Experience with Cloud computing/Elastic computing across virtualized environments.