1 to 25 of 59 PCI DSS Jobs

local government frameworks.Ensure that security compliance efforts are aligned with relevant laws and regulations, and lead audits to verify compliance with standards like PSN, PCI-DSS, etc.Develop and manage ongoing assurance processes to evaluate the effectiveness of security controls, including security testing, penetration testing, and vulnerability management programs.Coordinate … profile contained in the Essential service Capital scheme (ESP).In-depth knowledge of cybersecurity frameworks (e.g. Local Government CAF) and regulatory compliance requirements (PSN, PCI-DSS).In-depth knowledge of cybersecurity technologies, tools, and methodologies (e.g., SIEM, IDS/IPS, firewalls, DLP).In-depth understanding of cybersecurity standards ...

triage, containment, forensics, root cause analysis, and post-incident hardening.Partner with Privacy/Compliance so platform controls satisfy SOC 2 Type II, ISO 27001, PCI DSS, and GDPR, and design decisions stay defensible and auditable.Scale security through people. Build a Security Champions program and secure coding enablement … bounty/pentest program, and driving remediation across teams you don't manage.Strong working knowledge of SOC 2 Type II, ISO 27001, PCI DSS, and GDPR.Ability to turn complex security concepts into clear guidance for engineers and risk-based recommendations for executives.Excellent English, written and verbal.Advantageous ExperienceBackground ...

mentor a team of governance specialists, helping one another succeed through close collaboration . Lead the global compliance and certification programmes (including ISO 27001, PCI-DSS, NIS2, and DORA) across all active markets. Communicate security strategy, risks, and governance updates to Director-level stakeholders, C-level executives … security governance with broader business ambitions. What will you bring to the team? Comprehensive expertise in security frameworks and regulations (GDPR, ISO 27001, NIS2, PCI-DSS, DORA). Proven capability to develop a deep understanding of internal and external partners to align security with business goals. Strong leadership ...

governance. Key responsibilities include: Managing and enhancing cyber security governance and compliance frameworks. Owning and developing the organisation's GRC platform. Leading PCI DSS compliance activities and supporting audit requirements. Managing supplier security assurance and third-party risk assessments. Advising projects and stakeholders on cyber security and compliance … requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology initiatives. We're keen to speak with cyber security, risk, governance and compliance ...

projects aligned with the wider Information Security Strategy Provide authoritative guidance on regulatory requirements, data protection and security frameworks including ISO 27001, NIST, PCI DSS and GDPR Oversee security governance across projects, procurement and development activity, ensuring risks are addressed throughout the SDLC and DPIA process Maintain information … CISSP, CISM, CISA, an MSc or an equivalent recognised qualification Proven experience managing ISO 27001 and other security governance frameworks such as NIST or PCI DSS Strong understanding of data protection and regulatory requirements including GDPR, FCA, ICO and PRA expectations Experience assessing and managing supplier security risks ...

security hardening and infrastructure upgrades. Support corporate IT infrastructure, including Google Workspace, device management and endpoint security. Contribute to infrastructure security and compliance, including PCI-DSS requirements. Identify opportunities to automate processes and modernise legacy infrastructure. Skills & Experience Required We're looking for an experienced Infrastructure Engineer, Systems … Experience with any of the following would be advantageous: Google Kubernetes Engine (GKE) and wider GCP services. Cassandra, ScyllaDB or other distributed database technologies. PCI-DSS, ISO 27001 or SOC 2 compliance environments. GitOps, ArgoCD or Kustomize. Istio or other service mesh technologies. Cloudflare, including ...

broad, complex problems. Key Duties: As the lead subject matter expert in technology compliance, ensure the vulnerability management program aligns with regulatory requirements (e.g., PCI-DSS, HIPAA, NIST, ISO 27001) and integrates with other security tools such as SIEM, CMDB, and ticketing systems. Define long-term strategy … scope, schedule, budgeting, risk evaluation, quality, integration, staffing, and communications. Knowledge of security regulations (e.g., Sarbanes-Oxley, Payment Card Industry Data Security Specification PCI DSS , Health Insurance Portability and Accountability Act HIPAA ) and standards (e.g. ISO 27001, NIST SP800-series). Excellent verbal and written communication skills. High ...

technologies. Track emerging threats and assess how they could affect the organisation. Align security practices with standards such as ISO 27000 series, PCI DSS, COBIT, NIST and OWASP. Identify security risks and recommend proportionate controls and remediation. About You Broad knowledge of modern enterprise technology, including Cloud … threat modelling frameworks such as STRIDE and MITRE ATT&CK. Significant knowledge of endpoint, network, cryptography and IAM security. Awareness of ISO 27000 series, PCI DSS, COBIT, NIST and OWASP. A security management certification such as CISSP, CISM or CCSP, and a technical security certification such ...

critical systems. Identify architectural and technical security risks and provide pragmatic recommendations that balance security with business objectives. Support security and compliance initiatives across PCI DSS, GDPR, ISO 27001 and SOC 2. Work with internal stakeholders and external auditors during security assessments and certification programmes. Promote secure engineering … APIs, API gateways and modern integration architectures. Hands-on knowledge of authentication, identity and access management. Experience with security and compliance frameworks such as PCI DSS, GDPR, ISO 27001 and/or SOC 2. Knowledge of vulnerability management, risk assessment and security governance. Strong communication skills with ...

lasting improvements. Develop resilience and disaster recovery plans. Implement secrets management, network protection and identity and access controls. Support the technical controls required for PCI-DSS compliance and FCA requirements. Automate routine operations and reduce manual intervention. Create reusable tooling and self-service capabilities that help developers deliver … operating cloud infrastructure as a Platform Engineer or SRE. Desirable experience Building platforms for fintech, banking or payments businesses. Supporting compliance frameworks such as PCI-DSS, SOC 2 or ISO 27001. Establishing monitoring and on-call processes from scratch. Operating multi-tenant SaaS platforms. The package Generous annual ...

customers. Secure the Platform: Oversee identity and user account lifecycle management, PKI, and payment-related engineering, ensuring they are robust, auditable, and aligned to PCI-DSS and ISO 27001. What you'll bring Proven experience scaling engineering teams in a high-growth or scaled digital business, ideally C# … setting, and in an environment with strict change, incident, and problem management controls. Experience with user account management, PKI, or payment platforms. Familiarity with PCI-DSS and ISO 27001 standards. Benefits: Salary up to £120,000. Enhanced company pension contribution. 25 days annual leave, increasing with tenure. Access ...

applications and SaaS platforms as part of supplier and technology assurance work. Supporting client compliance and assurance requirements including GDPR, Cyber Essentials Plus and PCI DSS.Security solution design and implementationDesigning and implementing security solutions in client environments, from discovery and requirements gathering through build, testing, rollout and handover. Working ...

incident post-mortems, root cause analysis, tabletop exercises and crisis response testing to drive continuous improvement.Working knowledge of UK security and compliance frameworks, including PCI-DSS, GDPR, NIST, ISO 27001 and Cyber Essentials.Additional InformationBeneFITS’ Employee discount (hello ASOS discount!) Employee sample sales 25 days paid annual leave + ...

incident reports and practical security recommendations to technical and non-technical stakeholders. Support security governance and compliance requirements, including UK GDPR, ISO 27001 and PCI DSS where applicable. Improve SOC processes, playbooks, tooling and reporting, while mentoring junior security colleagues. About You We are looking for an experienced ...

incident reports and practical security recommendations to technical and non-technical stakeholders. Support security governance and compliance requirements, including UK GDPR, ISO 27001 and PCI DSS where applicable. Improve SOC processes, playbooks, tooling and reporting, while mentoring junior security colleagues. About You We are looking for an experienced ...

executive reporting to ensure clear ownership, accountability, and timely risk reduction. Experience applying regulatory, risk, compliance, and control frameworks such as NIST, ISO 27001, PCI DSS, SOX, SOC 2, CMMC, GDPR, or similar standards to guide strategy, prioritization, governance, and leadership decision-making. All you'll need ...

engineers and non-technical auditors. Desired Experience & QualificationsHands-on experience administering modern GRC platforms (e.g., AuditBoard).Familiarity with regulations and frameworks such as DORA, PCI DSS, or SOC 2 (Type II).Experience implementing automated compliance monitoring or evidence pipelines. Relevant industry certifications (e.g., CISA, CRISC, CISM ...

Compliance Support Assist with the investigation and escalation of security incidents. Maintain documentation, incident reports, and operational runbooks. Support compliance initiatives including ISO 27001, PCI DSS, Cyber Essentials Plus, and GDPR. Cloud Security Development Gain hands-on experience with Azure security controls and monitoring. Develop knowledge of identity ...

implementing security by design, AWS security services such as IAM, WAF and KMS, and controls aligned with compliance frameworks such as ISO 27001 and PCI DSS. Infrastructure as Code: Extensive experience designing and implementing Infrastructure as Code solutions using Terraform, CloudFormation, CDK or equivalent, establishing reusable patterns and best ...

third parties. Experience with threat and risk assessments, practical controls and recognised frameworks such as NIST CSF, ISO 27001, IEC 62443, NCSC CAF, GDPR, PCI DSS or NIS.Knowledge in one or more areas such as cloud security, OT/IoT security, network security, infrastructure security, security architecture ...

. Familiarity with DSP Toolkit or equivalent assurance frameworks. Financial services security: experience designing controls for regulated financial environments, including FCA/PRA expectations, PCI-DSS, and secure integration patterns for core banking or payment systems. Security frameworks and standards: working knowledge of NIST ...

regulated environment Hands-on experience with security tooling such as SIEM, firewalls and IAM solutions Experience with regulatory compliance such as GDPR or PCI-DSS within financial services Familiarity with programming languages such as Python, Java or C++, or experience supporting RFPs, mentoring colleagues or contributing to thought ...

business teams, driving security risk assessments, compliance initiatives, business continuity planning and audit programmes. You will oversee regulatory and certification activities including ISO 27001, PCI DSS and NIS2, while ensuring identified risks are clearly communicated, prioritised and effectively remediated. The role offers significant exposure to cloud security governance ...

cybersecurity projects. Experience with project management methodologies and tools (e.g., Agile, Waterfall, MS Project). Experience with regulatory compliance and industry standards (e.g., GDPR, PCI-DSS, ISO 27001). Skills, Licenses & Certifications Relevant certifications including but not limited to CISSP, CISM, CISA, CompTIA Security+, Certified Identity and Access ...

JSP490 Working with system secure design MOD/GDS Secure by Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards ...