1 to 25 of 164 PCI DSS Jobs

IntroductionWhat is the role Reporting to the IT Security and IT GRC Manager, the PCI Assurance Analyst acts as ourPayment Card Industry Data Security Standard (PCI DSS) subject matter expert andlead for the PCI-DSS compliance process.Our PCI Assurance Analyst is responsible for ensuring … compliance with the PCI DSS byassessing, validating, and evidencing how cardholder data is protected across people,processes and technology.The role involves interpreting PCI requirements, conducting control assessments andgap analyses, coordinating self-assessments or external audits, reviewing technical andprocedural evidence and working closely with IT, security, and business ...

audit‐driven assurance toward scalable, repeatable control‐based implementation. Acting as a hands‐on, solutions‐driven GRC engineering consultant, translating regulatory and control requirements (PCI DSS, SOC 2, Visa KCX) into practical, implementable controls within our products, teams and cloud environments. Designing and implementing automation where it adds … customers by providing appropriate responses to customer RFP questions and customer audits on topics such as cybersecurity, technology operations, and compliance with standards (e.g., PCI DSS, SOC 2). Responsibilities As a company we hire people with a willingness to adapt to a variable role, so along with ...

security governance, operations, compliance, and risk management across a complex technology estate spanning payments, healthcare, and B2B SaaS. With ongoing M&A activity, active PCI-DSS obligations, and a rapidly evolving platform landscape, you'll play a critical role in protecting our customers, supporting business growth, and embedding … Oversee security operations, including threat detection, incident response, and remediation Act as the executive lead during security incidents and manage external stakeholder communications Own PCI-DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group's Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials ...

protect the confidentiality, integrity, and availability of our information assets, intellectual property, and customer data, ensuring strict compliance with regulatory frameworks including FCA, DORA, PCI DSS, and Edenred group security requirements.**Key Responsibilities:*** Lead the PayTech Information Security function with alignment to Edenred’s wider cyber risk management … Crime and Anti-Fraud teams to mitigate cyber risks related to financial crime.* Manage third-party security risk due diligence programs.* Lead and maintain PCI DSS and PCI PIN compliance and engagement with Qualified Security Assessors (QSAs).* Drive cyber awareness programs and phishing simulations to embed ...

protect the confidentiality, integrity, and availability of our information assets, intellectual property, and customer data, ensuring strict compliance with regulatory frameworks including FCA, DORA, PCI DSS, and Edenred group security requirements. Key Responsibilities: Lead the PayTech Information Security function with alignment to Edenred’s wider cyber risk management … Crime and Anti-Fraud teams to mitigate cyber risks related to financial crime. Manage third-party security risk due diligence programs. Lead and maintain PCI DSS and PCI PIN compliance and engagement with Qualified Security Assessors (QSAs). Drive cyber awareness programs and phishing simulations to embed ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership * Own the end-to-end payment card … senior escalation point for complex incidents and service issues. * Maintain operational procedures, technical documentation, and support models. * Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management * Lead the delivery of payment-related projects and strategic initiatives. * Coordinate internal stakeholders, suppliers ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership * Own the end-to-end payment card … senior escalation point for complex incidents and service issues. * Maintain operational procedures, technical documentation, and support models. * Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management * Lead the delivery of payment-related projects and strategic initiatives. * Coordinate internal stakeholders, suppliers ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership * Own the end-to-end payment card … senior escalation point for complex incidents and service issues. * Maintain operational procedures, technical documentation, and support models. * Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management * Lead the delivery of payment-related projects and strategic initiatives. * Coordinate internal stakeholders, suppliers ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership* Own the end-to-end payment card … senior escalation point for complex incidents and service issues.* Maintain operational procedures, technical documentation, and support models.* Ensure compliance with industry standards, including PCI DSS and P2PE requirements.Team LeadershipProject and Change Management* Lead the delivery of payment-related projects and strategic initiatives.* Coordinate internal stakeholders, suppliers, and business ...

Senior Information Security Analyst - Audit & Compliance ISO27001, SOC2, PCI-DSS, NIST, GDPR London (Barbican). Hybrid. 2 days a week onsite. Up to £100k plus 8% bonus, pension, private medical etc We're working with a global technology partner to find a certified Information Security Analyst. This … Collaborate with IT & Security teams to identify and remediate vulnerabilities. What We're Looking For Strong knowledge of audit & compliance frameworks (ISO 27001,SOC2, PCI DSS, Cyber Essentials) Experience with CSOC tools such as Rapid7 InsightIDR or other SIEM solutions. Hands-on experience with internal/external audits ...

scales without friction Defining and enforcing cloud security architecture standards, guardrails, and policy-as-code inline with industry best practices including NIST, CIS, and PCI DSS. Use Wiz or equivalent CNAPP/CSPM to continuously assess, prioritise, and drive remediation of misconfigurations and vulnerabilities against CIS, NIST, and PCI … DSS benchmarks. Security Monitoring Fine tune, and maintain modern SIEM platform (e.g. Sentinel) including KQL detection rules, workbooks, logging pipelines, and AI-assisted alert triage. Map detection coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps across the cloud estate. Maintain alignment to PCI ...

ensure security is embedded by design, not added as an afterthought. Your work will span from threat modeling and risk assessment to architecting PCI‐DSS compliant solutions, building the secure infrastructure that underpins our global mobility and payments platforms. This is your opportunity to influence how a fast … threat modeling, proactively identifying vulnerabilities and mitigation strategies. Develop and maintain security policies and frameworks aligned with NIST, ISO 27001, and CIS Controls. Lead PCI‐DSS architecture and compliance, ensuring both front‐ and back‐office systems meet standards. Guide and mentor teams in best‐practice security engineering, fostering ...

colleagues safe. As our IT Security Manager, you'll be at the heart of protecting our organisation from evolving cyber threats while leading our PCI-DSS compliance programme and driving security best practice across the business. This is a hands-on role where you'll have the autonomy … infrastructure and systems. Own security incident response activities, from investigation through to remediation. Manage vulnerability assessments and penetration testing programmes. Lead our Tier 1 PCI-DSS compliance programme and annual audit process. Act as the key contact for auditors and assessors. Maintain security documentation, evidence and compliance records. ...

senior escalation point for complex incidents and service issues. Maintain operational procedures, technical documentation, and support models. Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management Lead the delivery of payment-related projects and strategic initiatives. Coordinate internal stakeholders, suppliers … business value. Security and Compliance Lead the implementation and ongoing management of Point-to-Point Encryption (P2PE) across the estate. Ensure compliance with PCI DSS and other applicable payment industry standards. Support security audits, assessments, and remediation activities. Maintain awareness of emerging threats and regulatory developments. Serve ...

Selfridges is seeking a PCI Assurance Analyst to own the PCI DSS program. You will interpret requirements, lead gap analyses, coordinate SAQs and AOCs, and work with QSAs, acquirers and brands to drive compliant outcomes. The role focuses on scoping, evidence validation, and remediation planning, with reporting … senior stakeholders and guidance on secure design for PCI scoped systems. Based in London, the position supports a strong compliance culture and risk-based decision making within IT #J-18808-Ljbffr ...

privacy, securing our company and data against cyber threats. We operate in a highly secure global SaaS organization that holds multiple certifications such as PCI‐DSS, ISO/IEC 27001, SOC, HIPAA, IRAP and works with a large, federated customer base. Responsibilities Develop and lead a team … approach to staying updated with the latest security threats, vulnerabilities and mitigation techniques. Advantageous Skills and Experience Experience working on projects ensuring compliance with PCI DSS, ISO/IEC 27001, SOC, HIPAA, IRAP controls. Knowledge of security compliance standards relevant to the SaaS industry such as PCI ...

ideally within financial services, banking, or payments. Experience in InfoSec and Cyber Security. Experience setting up policies and processes in InfoSec area. Familiarity with PCI-DSS, ISO27001, SOC 2/3 or other global standards. Familiarity with regulatory requirements (DORA, PCI-DSS, PSD2, GDPR). Understanding … identify areas for improvement. Performing security risk and control assessments for new products or initiatives. Working with third party InfoSec auditors (penetration testing, PCI compliance etc.). Conduct regular risk assessments and vulnerability assessments to identify security gaps and develop appropriate mitigation plans. Conducting regulatory gap analysis for regulations ...

Head of Information Security - CISSP, CISM, ISO27001, NIST, PCI DSS, GDPR, DevSecOps, Cloud Security, SIEM, SOC, AI Security. Permanent, West London, Hybrid Working. c.£100k +Benefits Head of Information Security/CISO/Senior InfoSec Consultant required to lead and develop a modern, security-first function within … governance framework. Define and develop robust security controls inline with both business practices and compliance requirements inc ISO27001, CE+, SOC2, NIST CSF, GDPR and PCI DSS. Embed Secure by Design and DevSecOps principles across engineering teams. Lead cyber risk management, incident response, threat modelling and vulnerability management using ...

lead all aspects of external audits and certifications supporting lottery customers, including but not limited to SOC 1, SOC 2, ISO 27001, WLA-SCS, PCI-DSS, and jurisdiction-specific requirements.* Maintain audit readiness throughout all iLottery regions by conducting proactive control evaluations, identifying gaps, monitoring remediation progress … audit methodologies, internal controls, risk management, and governance frameworks.* Experience with recognized industry benchmarks and certifications such as SOC 1, SOC 2, ISO 27001, PCI-DSS, WLA-SCS, NIST, COBIT, or comparable frameworks.* Strong analytical, problem-solving, and decision-making capabilities.* Excellent communication, presentation, and collaborator management skills. ...

coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards/frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR, DSP Toolkit and wider public sector assurance requirements. Drive security awareness and practical adoption of secure ways of working … regulated, or complex enterprise environment. Knowledge of NCSC-aligned security principles and practical governance/assurance approaches. Security compliance and audit-readiness (e.g., PSN, PCI-DSS, GDPR, Cyber Essentials Plus and similar frameworks). Microsoft security tooling (e.g., Sentinel, Defender, and M365 E5 security capabilities); exposure to Copilot ...

coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards/frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR, DSP Toolkit and wider public sector assurance requirements. Drive security awareness and practical adoption of secure ways of working … regulated, or complex enterprise environment. Knowledge of NCSC-aligned security principles and practical governance/assurance approaches. Security compliance and audit-readiness (e.g., PSN, PCI-DSS, GDPR, Cyber Essentials Plus and similar frameworks). Microsoft security tooling (e.g., Sentinel, Defender, and M365 E5 security capabilities); exposure to Copilot ...

Foundations, establishing centralized monitoring and alerting (via Wiz/Security Hub). Data Privacy & Compliance End-to-End Privacy: Own the GDPR and PCI-DSS compliance programmes, embedding "Privacy by Design" and data minimization directly into our delivery processes. Legal Partnership: Collaborate with Legal to manage DPAs, transfer … information security, including leadership-level responsibility Proven experience building and scaling security and privacy programmes within growing organisations Strong hands-on knowledge of GDPR, PCI-DSS, incident response, and resilience planning Experience working within cloud-first environments, ideally AWS Strong understanding of security within e-commerce, fintech ...

continually improving the organisation’s cyber security strategy, roadmap and governance framework. Maintaining compliance with FCA regulatory expectations and international security standards including PCI DSS, ISO 27001, DORA, PSD2, NIST and CIS Controls. Building and maintaining an effective cyber security governance framework, including policies, standards, risk management processes … Experience implementing and maintaining cyber security governance frameworks, policies, standards, procedures and security roadmaps. Experience managing security programs aligned to recognized frameworks such as PCI DSS, ISO 27001, NIST CSF, CIS Controls, SOC 2, DORA, PSD2 and SWIFT CSCF (where applicable). Experience leading regulatory, customer and certification ...

cyber risks before solutions go live. Help maintain and evolve our Information Security Management System, ensuring alignment with frameworks including ISO 27001, NIST and PCI DSS. Partner with Architecture, Engineering, Technology and third-party suppliers to embed effective security controls into new and existing technology solutions. Produce clear security … Security Consultant, Security Architect or Cyber GRC role within a complex technology environment. Strong knowledge of information security frameworks and standards, including ISO 27001, PCI DSS, NIST or equivalent industry best practice. Experience conducting security risk assessments, security assurance activities and advising on secure technology design across ...

cyber risks before solutions go live. Help maintain and evolve our Information Security Management System, ensuring alignment with frameworks including ISO 27001, NIST and PCI DSS. Partner with Architecture, Engineering, Technology and third-party suppliers to embed effective security controls into new and existing technology solutions. Produce clear security … Security Consultant, Security Architect or Cyber GRC role within a complex technology environment. Strong knowledge of information security frameworks and standards, including ISO 27001, PCI DSS, NIST or equivalent industry best practice. Experience conducting security risk assessments, security assurance activities and advising on secure technology design across ...