1 to 25 of 116 PCI DSS Jobs

security governance, operations, compliance, and risk management across a complex technology estate spanning payments, healthcare, and B2B SaaS. With ongoing M&A activity, active PCI-DSS obligations, and a rapidly evolving platform landscape, you’ll play a critical role in protecting our customers, supporting business growth, and embedding … Oversee security operations, including threat detection, incident response, and remediation Act as the executive lead during security incidents and manage external stakeholder communications Own PCI-DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group’s Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials ...

. In addition to supporting controlled research, this role will also guide the team's work in other key compliance areas such as HIPAA, PCI-DSS, NIST 800-53, and internal policy requirements. This position is central to building a mature, risk-informed, and agile GRC program that … NIST 800-171, CMMC, DFARS, ITAR) Conducting risk assessments, gap analyses, control reviews, and compliance documentation for enterprise-wide regulatory frameworks, such as HIPAA, PCI-DSS, NIST 800-53, GLBA, and others. Advising on appropriate security controls, documenting implementation strategies, and helping units align with both external requirements ...

protect the confidentiality, integrity, and availability of our information assets, intellectual property, and customer data, ensuring strict compliance with regulatory frameworks including FCA, DORA, PCI DSS, and Edenred group security requirements.**Key Responsibilities:*** Lead the PayTech Information Security function with alignment to Edenred’s wider cyber risk management … Crime and Anti-Fraud teams to mitigate cyber risks related to financial crime.* Manage third-party security risk due diligence programs.* Lead and maintain PCI DSS and PCI PIN compliance and engagement with Qualified Security Assessors (QSAs).* Drive cyber awareness programs and phishing simulations to embed ...

protect the confidentiality, integrity, and availability of our information assets, intellectual property, and customer data, ensuring strict compliance with regulatory frameworks including FCA, DORA, PCI DSS, and Edenred group security requirements.**Key Responsibilities:*** Lead the PayTech Information Security function with alignment to Edenred’s wider cyber risk management … Crime and Anti-Fraud teams to mitigate cyber risks related to financial crime.* Manage third-party security risk due diligence programs.* Lead and maintain PCI DSS and PCI PIN compliance and engagement with Qualified Security Assessors (QSAs).* Drive cyber awareness programs and phishing simulations to embed ...

Senior Information Security Analyst/Engineer/Architect to £54k + Benefits ISO27001, COBIT, SECURITY, ITIL, CISM, CISSP, PCI-DSS Lead Information Security Engineer/Analyst: Do you have a background working in an IT Security function and are able to identify and remediate threats or vulnerabilities, implement … assets and mitigate against potential risks.You will be actively responsible for ensuring the successful achievement of external certifications such as ISO27001, MOU, PSN and PCI-DSS etc alongside managing security incident response plans. In addition, the Lead information Security Analyst/Engineer will provide advice and guidance ...

afterthought applied on top. Advise the CISO on technical security strategy, emerging technology risks, and the security implications of architectural decisions. Support PCI DSS compliance from an architectural perspective, ensuring the platform design supports scope minimisation, network segmentation, and the technical requirements of PCI DSS 4.0. … . Understanding of cryptographic principles and their practical application in payment systems: tokenisation, format‐preserving encryption, HSM/KMS key management, TLS configuration, and PCI P2PE concepts. Experience leading technical teams, mentoring engineers, and building team capability in a growing organisation. Ability to communicate architectural decisions and trade‐offs ...

technical expertise in Microsoft Active Directory (AD), Windows Server environments, and authentication solutions. IT Security & Compliance: Ensure compliance with security and regulatory standards, including PCI DSS, Cyber Essentials+, DORA, and ISO 27001. Implement and enforce security best practices across infrastructure automation and cloud environments. Secure high-value … Cyber Essentials, NIST, ISO 27001). In-depth understanding of network security and compliance in regulated environments. Proven ability to secure high-value data (PCI cardholder data, PII) and implement security best practices. Strong networking knowledge (LAN, WAN, DNS, DHCP, VPN, TCP/IP). Proficiency in firewall ...

Head of Information Security - CISSP, CISM, ISO27001, NIST, PCI DSS, GDPR, DevSecOps, Cloud Security, SIEM, SOC, AI Security. Permanent, West London, Hybrid Working. c.£100k +Benefits Head of Information Security/CISO/Senior InfoSec Consultant required to lead and develop a modern, security-first function within … governance framework. Define and develop robust security controls inline with both business practices and compliance requirements inc ISO27001, CE+, SOC2, NIST CSF, GDPR and PCI DSS. Embed Secure by Design and DevSecOps principles across engineering teams. Lead cyber risk management, incident response, threat modelling and vulnerability management using ...

product and delivery teams in Agile and DevOps environments to embed security by design. Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards. Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance. Present security … cloud security, secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure ...

lead all aspects of external audits and certifications supporting lottery customers, including but not limited to SOC 1, SOC 2, ISO 27001, WLA-SCS, PCI-DSS, and jurisdiction-specific requirements. Maintain audit readiness throughout all iLottery regions by conducting proactive control evaluations, identifying gaps, monitoring remediation progress … audit methodologies, internal controls, risk management, and governance frameworks. Experience with recognized industry benchmarks and certifications such as SOC 1, SOC 2, ISO 27001, PCI-DSS, WLA-SCS, NIST, COBIT, or comparable frameworks. Strong analytical, problem-solving, and decision-making capabilities. Excellent communication, presentation, and collaborator management skills. ...

lead all aspects of external audits and certifications supporting lottery customers, including but not limited to SOC 1, SOC 2, ISO 27001, WLA-SCS, PCI-DSS, and jurisdiction-specific requirements.* Maintain audit readiness throughout all iLottery regions by conducting proactive control evaluations, identifying gaps, monitoring remediation progress … audit methodologies, internal controls, risk management, and governance frameworks.* Experience with recognized industry benchmarks and certifications such as SOC 1, SOC 2, ISO 27001, PCI-DSS, WLA-SCS, NIST, COBIT, or comparable frameworks.* Strong analytical, problem-solving, and decision-making capabilities.* Excellent communication, presentation, and collaborator management skills. ...

product and delivery teams in Agile and DevOps environments to embed security by design. Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards. Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance. Present security … cloud security, secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure ...

product and delivery teams in Agile and DevOps environments to embed security by design. Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards. Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance. Present security … cloud security, secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure ...

product and delivery teams in Agile and DevOps environments to embed security by design. Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards. Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance. Present security … cloud security, secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure ...

product and delivery teams in Agile and DevOps environments to embed security by design. Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards. Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance. Present security … cloud security, secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure ...

Logical and efficient, with a keen attention to detail Self-motivated Desirable: JNCIP or equivalent (e.g. CCNA) Experience of working within industry standards (e.g. PCI DSS, ISO270001, ITILv4) Experience configuring and maintaining VPNs An understanding of network cable patching and key standards for installation of structured cabling … awareness of PCI DSS What You’ll get in Return Salary starting £37,685 18 Month Fixed Term Contract Monday to Friday, 8:00am to 4:00pm, with the opportunity of 2 days a week remote working (changing to 1 day a week remote working from January ...

Logical and efficient, with a keen attention to detail Self-motivated Desirable: JNCIP or equivalent (e.g. CCNA) Experience of working within industry standards (e.g. PCI DSS, ISO270001, ITILv4) Experience configuring and maintaining VPNs An understanding of network cable patching and key standards for installation of structured cabling … awareness of PCI DSS What Youll get in Return Salary starting £37,685 18 Month Fixed Term Contract Monday to Friday, 8:00am to 4:00pm, with the opportunity of 2 days a week remote working (changing to 1 day a week remote working from January ...

linking threats, risks and controls) Deepening understanding of security controls and their practical application Gaining further exposure to security standards and regulatory frameworks (e.g. PCI DSS, data protection) Strengthening end-to-end security design capability (e.g. threat modelling, control coverage) Providing clearer examples of individual contribution and ownership … security decisions Any experience of these would be really useful Awareness of industry related security standards such as ISO 27000 series, PCI DSS, COBIT, NIST, OWASP. Certifications in Security Management such as CISSP/CISM/CCSP or equivalent. Certifications in technical Security domains such as CEH/ ...

executive role entails governance, operations, compliance, and risk management within a complex technology environment. The ideal candidate will have significant CISO experience, especially with PCI-DSS compliance, and possess strong leadership skills. Competitive salary, benefits, and a hybrid working model are offered. #J-18808-Ljbffr ...

Terraform Maintain and improve local development environments so engineers can run the full platform effectively Enhance monitoring, alerting and observability across all services Support PCI-DSS compliance requirements through secure infrastructure design and operational controls Implement and manage network segmentation, secrets management, access controls and audit processes Collaborate … line and using Git-based workflows Desirable Experience Experience in any of the following areas would be advantageous: Istio or other service mesh technologies PCI-DSS or other regulated/compliance-driven environments Google Cloud Platform services including KMS, Cloud Armor, Binary Authorization and Datastore ...

Terraform Maintain and improve local development environments so engineers can run the full platform effectively Enhance monitoring, alerting and observability across all services Support PCI-DSS compliance requirements through secure infrastructure design and operational controls Implement and manage network segmentation, secrets management, access controls and audit processes Collaborate … line and using Git-based workflows Desirable Experience Experience in any of the following areas would be advantageous: Istio or other service mesh technologies PCI-DSS or other regulated/compliance-driven environments Google Cloud Platform services including KMS, Cloud Armor, Binary Authorization and Datastore ...

Type II), International Organization for Standardization/International Electrotechnical Commission 27001 (ISO/IEC 27001), and Payment Card Industry Data Security Standard (PCI DSS), and industry-specific regulations, optimizing enterprise practices for compliance and audit readiness HS diploma or GED Nice If You Have: Experience with API-based ...

implementation and monitoring of disaster recovery solutions and backup strategies. Ensure compliance with internal security policies and regulatory requirements (e.g., GDPR, ISO27001, PCI DSS v4.0). Provide support and root cause analysis for complex issues. Document system configurations, changes and operating procedures. Participate in infrastructure projects, including system ...

implementation and monitoring of disaster recovery solutions and backup strategies. Ensure compliance with internal security policies and regulatory requirements (e.g., GDPR, ISO27001, PCI DSS v4.0). Provide support and root cause analysis for complex issues. Document system configurations, changes and operating procedures. Participate in infrastructure projects, including system ...

security clearance to be considered. Technical Knowledge Security frameworks including ISO 27001, NIST CSF, CIS and NCSC guidance Regulatory landscape including GDPR and PCI DSS Familiarity with HMG and NCSC standards Modern technology environments: Cloud platforms such as Azure, AWS and Google Cloud Microsoft 365 Infrastructure and network ...