1 to 25 of 31 PCI DSS Jobs in the North West

Analyst - Payments/PCI-DSS/ISO Manchester - office based 4 days a week, remote 1 day a week £55-60k pa A successful payment technology company are seeking a GRC Analyst to join their growing Security team and be responsible for risk management, compliance monitoring … governance support as well as 3rd party vendor risk management. As a GRC Analyst you will ensure compliance with all relevant regulations including PCI-DSS, GDPR, ISO 27001, NIS Regulations and the Data Protection Act 2018. Any experience with Attestation of Compliance (AoC) is beneficial. This role will ...

ensure security is embedded by design, not added as an afterthought. Your work will span from threat modeling and risk assessment to architecting PCI‐DSS compliant solutions, building the secure infrastructure that underpins our global mobility and payments platforms. This is your opportunity to influence how a fast … threat modeling, proactively identifying vulnerabilities and mitigation strategies. Develop and maintain security policies and frameworks aligned with NIST, ISO 27001, and CIS Controls. Lead PCI‐DSS architecture and compliance, ensuring both front‐ and back‐office systems meet standards. Guide and mentor teams in best‐practice security engineering, fostering ...

governance. Key responsibilities include: Managing and enhancing cyber security governance and compliance frameworks. Owning and developing the organisation's GRC platform. Leading PCI DSS compliance activities and supporting audit requirements. Managing supplier security assurance and third-party risk assessments. Advising projects and stakeholders on cyber security and compliance … requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology initiatives. We're keen to speak with cyber security, risk, governance and compliance ...

effectiveness of information security controls and identify opportunities for improvement. Apply recognised security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, PCI-DSS, and other relevant best practices in a proportionate and risk-based manner. Liaise with Cyber Security, IT, Business Continuity, Data Protection, Risk, Compliance … risk assessments, control reviews, audits, or assurance activities. Technical knowledge of information security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, DORA, PCI-DSS, and related security practices. Strong communicator with positive influencing and interpersonal skills. Ability to synthesise complex technical and business information and present ...

systems into payment gateways. Android Experience: Familiarity with Android development, specifically in the context of building or maintaining applications for smart payment terminals. PCI-DSS & Compliance: Deep understanding of payment scheme rules, PCI-DSS compliance, EMV standards, or Point-to-Point Encryption (P2PE). Infrastructure ownership ...

technologies. Track emerging threats and assess how they could affect the organisation. Align security practices with standards such as ISO 27000 series, PCI DSS, COBIT, NIST and OWASP. Identify security risks and recommend proportionate controls and remediation. About You Broad knowledge of modern enterprise technology, including Cloud … threat modelling frameworks such as STRIDE and MITRE ATT&CK. Significant knowledge of endpoint, network, cryptography and IAM security. Awareness of ISO 27000 series, PCI DSS, COBIT, NIST and OWASP. A security management certification such as CISSP, CISM or CCSP, and a technical security certification such ...

lasting improvements. Develop resilience and disaster recovery plans. Implement secrets management, network protection and identity and access controls. Support the technical controls required for PCI-DSS compliance and FCA requirements. Automate routine operations and reduce manual intervention. Create reusable tooling and self-service capabilities that help developers deliver … operating cloud infrastructure as a Platform Engineer or SRE. Desirable experience Building platforms for fintech, banking or payments businesses. Supporting compliance frameworks such as PCI-DSS, SOC 2 or ISO 27001. Establishing monitoring and on-call processes from scratch. Operating multi-tenant SaaS platforms. The package Generous annual ...

office, 1 day remote) focuses on risk management, compliance monitoring and governance support within the security team. You will ensure compliance with PCI-DSS, GDPR, ISO 27001, NIS Regulations, and the Data Protection Act 2018, with beneficial AoC experience and strong ability to communicate security requirements to stakeholders. ...

customers. Secure the Platform: Oversee identity and user account lifecycle management, PKI, and payment-related engineering, ensuring they are robust, auditable, and aligned to PCI-DSS and ISO 27001. What you'll bring Proven experience scaling engineering teams in a high-growth or scaled digital business, ideally C# … setting, and in an environment with strict change, incident, and problem management controls. Experience with user account management, PKI, or payment platforms. Familiarity with PCI-DSS and ISO 27001 standards. Benefits: Salary up to £120,000. Enhanced company pension contribution. 25 days annual leave, increasing with tenure. Access ...

technologies.Lead and support cyber security projects, improvements and strategic initiatives.Develop and maintain security standards, procedures and technical documentation.Support audit and compliance activities including PCI DSS, ISO 27001 and other relevant frameworks.Produce security metrics, reporting and risk insights for technical and business stakeholders.Evaluate emerging threats and technologies to strengthen … solving skills.Ability to communicate effectively and influence both technical and non-technical stakeholders.Experience working with recognised frameworks such as NIST CSF, ISO 27001 or PCI DSS.DesirableProfessional certifications such as CISSPExperience with Zero Trust security architectures.Experience with CNAPP, CSPM or cloud security platforms.Experience with AI security, governance or risk management.Experience ...

DevOps, CI/CD and secure delivery practices in an Agile, value-stream environment. Understanding of security frameworks, such as ISO27001, NIST and PCI-DSS. Skills and Qualifications Relevant technical security qualification or equivalent experience, for example AZ-500, SC-200, SC-300, SC-100, CISSP or similar. Strong ...

incident reports and practical security recommendations to technical and non-technical stakeholders. Support security governance and compliance requirements, including UK GDPR, ISO 27001 and PCI DSS where applicable. Improve SOC processes, playbooks, tooling and reporting, while mentoring junior security colleagues. About You We are looking for an experienced ...

with relevant security and control frameworks, including NIST 800-53, NIST 800-171, NIST 800-66, CMMC, NIST Framework, ISO, HITRUST and/or PCI CISSP or CISA certification preferred Solid verbal/written communication, problem-solving, analytical, and independent judgement skills to support an environment driven by customer ...

Cyber Essentials Plus requirements, support UK GDPR compliance and contribute to FCA operational resilience. Prepare the organisation for likely PCI DSS requirements. Performance, incidents and strategy Provide weekly and monthly management information on the performance of IT. Act as the senior out-of-hours escalation point for significant … within FCA-regulated financial services, debt purchase, collections or another operationally regulated environment. Working knowledge of ISO 27001, ISO 9001, Cyber Essentials Plus and PCI DSS. ITIL Foundation or a higher ITIL qualification. Relevant security or cloud certification. The Application Timeline A first stage video call with the internal ...

. Familiarity with DSP Toolkit or equivalent assurance frameworks. Financial services security: experience designing controls for regulated financial environments, including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems. Security frameworks and standards: working knowledge of NIST ...

bring 7+ years in information security CISSP, CISM, CISA, an MSc or equivalent Hands-on ISO 27001 experience, plus frameworks such as NIST and PCI DSS Information security risk management and supplier assurance Working knowledge of FCA, PRA, ICO and GDPR requirements The ability to explain technical risk ...

encryption. Experience with threat modelling, security assessments and architectural risk analysis. Understanding of regulatory and security frameworks such as ISO 27001, NIST, GDPR and PCI-DSS. Experience with cloud and/or network security would be highly advantageous. Strong stakeholder management and communication skills, with the ability to influence ...

third-party technology risk and assurance, including interpretation of SOC reports and independent assurance outputs. Experience applying relevant frameworks and regulatory requirements, including NIST, PCI DSS, data protection and emerging AI governance requirements. Experience operating in multi-entity or multi-fascia environments where governance is established centrally ...

remediation workflows and the division of responsibility between vulnerability‐program governance, threat‐led escalation, and asset‐owner remediation. Knowledge of NIST CSF, ISO 27001, PCI DSS, NYDFS cybersecurity requirements, or privacy and breach‐response obligations. Relevant certification such as Security+, CySA+, SC‐200, GCIH, GCIA, or equivalent experience ...

teams. Experience with security-related technical investigations. Working knowledge of industry-standard security practices. Awareness of the current Payment Card Industry Data Security Standard (PCI DSS) version. Excellent attention to detail and documentation skills. Strong organisational skills with the ability to meet deadlines. Pragmatic approach to governance ...

cyber security within a complex technology environment. Good working knowledge of security standards and controls, including ISO 27001, ISO 22301, Cyber Essentials Plus and PCI‐DSS. Practical experience of security risk management, vulnerability management, incident response, and remediation. Experience supporting security audits, third‐party or vendor assessments and regulatory ...

StrandsAgent, and AWS AgentCore — automating security workflows and increasing coverage at scale. Compliance & Governance – Perform compliance analysis against regulations such as GDPR, GLI and PCI DS, identify security requirements, and implement controls aligned to regulatory standards on client projects. Stakeholder Communication – Present security posture, risk findings, and remediation roadmaps … Security engineering role Experience in iGaming, lottery, or other highly regulated digital sectors such as finance, banking Experience with highly regulated environments (GDPR, GLI, PCI DSS, CFTC) Experience with CI/CD, infrastructure‐as‐code skills such as github actions and Terraform. Hands‐on AWS security experience ...

role in protecting and enhancing our AWS cloud environment, ensuring security controls, configurations and services remain aligned with industry best practice, internal standards and PCI DSS requirements. Working closely with engineering, architecture and risk teams, you’ll identify and remediate security risks, strengthen cloud monitoring and threat detection … means of relating business needs to security controls as well as a knowledge of common information security management frameworks, such as NIST, PCI, ISO27001, Mitre and ITIL frameworks. You’ll also have an understanding of security policies, processes, procedures and standards and how to embed these in existing business ...

trends. Planning and implementing scalability solutions to accommodate increasing demand. Regulatory Compliance: Ensuring network infrastructure compliance with industry regulations, standards, and best practices (e.g., PCI DSS, HIPAA, GDPR, ISO,Webtrust).Conductingaudits andimplementingremediation measures as needed. Mounting and Installation: Ability to mount and install network devices such as routers ...

manual implementation Build systems with security by design as a core foundation Ensure platform compliance with standards such as ISO 27001, SOC 2, PCI DSS and 3DS Design and operate key and secret management on GCP — Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager — including support ...