Executive- Audit

About the Job India has witnessed a journey of Innovation in Digital Payments and today it leads the world with over 45% of the Global digital transaction volume. At NPST, we believe that our decade long journey has carved an opportunity for building future roadmap for the world to follow.We are determined to contribute immensely to nation's growth story with our vision "to provide digital technology across financial value chain" and our mission to create leadership position in digital payment space.Founded in 2013, NPST is a leading fintech firm in India, part of the Make in India initiative and listed on BSE and National Stock Exchange. We specialize in Digital Payments operating as Technology Service Provider to Regulated entities and providing Payment Platform to Industry – empowered by payment processing engine, Financial Super app, Risk Intelligence engine and digital merchant solution.While we drive 3% of global digital transaction volume for over 100+ clients, we aim to increase our market share by 5X in next five years through innovation and industry first initiatives.As an Executive – Audit in the IT Infra & Security department, you will be responsible for supporting and executing internal audits focused on technology and information security. You will ensure that systems, processes, and controls comply with regulatory and internal security standards. This role requires a strong eye for detail, documentation skills, and coordination with cross-functional teams to maintain compliance with ISO, PCI, RBI, and NPCI frameworks.Job responsibilities: Support and execute internal IT security audits in alignment with ISO 27001, PCI DSS, RBI, and NPCI requirements. Assist in periodic risk assessments and identify control gaps across infrastructure, network, and application layers. Maintain and update audit documentation, evidence logs, and remediation reports. Collaborate with the compliance and security teams to ensure adherence to regulatory requirements. Conduct data validation and assist in evidence collection for external audit processes. Support continuous monitoring activities and identify areas for process improvement. Assist in preparing detailed audit findings, reports, and dashboards for internal and external stakeholders. Maintain strong coordination with IT teams to track implementation of audit recommendations. What are we looking for: Knowledge of IT security controls and compliance frameworks (ISO 27001, PCI DSS, RBI, NPCI). Experience with audit tools, evidence tracking, and security documentation. Knowledge of Security Audit of Financial products like us UPI/BBPS/MBS/API. Coordination with CERT IN empanelled Auditor for conducting VA/CA of Server, App Scan, Web Scan, Source Code Audit. Knowledge of Removing Vulnerabilities found in Audits (VA/CA) of servers. Knowledge of VAPT (Vulnerability Assessment and Penetration Testing). Knowledge of VA and CA freeware tools will be of added advantage. Knowledge of Penetration testing tools will be added advantage. Knowledge of SSL pinning and Rooted Devices. Knowledge of Cloud Infra like AWS/Azure. Analytical thinking, strong judgment, and decision-making abilities. Excellent communication and interpersonal skills. Entrepreneurial skills, ability to observe, innovate, and own your work. Detail-oriented and organized with strong time management skills. Influencing skills and the ability to create positive working relationships with team members at all levels. Collaborative approach and work with perfection as a group effort to achieve organizational goals.

Knowledge of IT security controls and compliance frameworks (ISO 27001, PCI DSS, RBI, NPCI). Experience with audit tools, evidence tracking, and security documentation. Knowledge of Security Audit of Financial products like us UPI/BBPS/MBS/API. Coordination with CERT IN empanelled Auditor for conducting VA/CA of Server, App Scan, Web Scan, Source Code Audit. Knowledge of Removing Vulnerabilities found in Audits (VA/CA) of servers. Knowledge of VAPT (Vulnerability Assessment and Penetration Testing). Knowledge of VA and CA freeware tools will be of added advantage. Knowledge of Penetration testing tools will be added advantage. Knowledge of SSL pinning and Rooted Devices. Knowledge of Cloud Infra like AWS/Azure. Bachelor's degree (Computer Science, B.Tech/ M.Tech) or any equivalent degree/course.