1 to 25 of 129 PCI DSS Jobs

share our passion for creating an airline people love, we want to hear from you. Role Summary: The Technology Compliance Program Manager (PCI) serves as the primary subject matter expert for the enterprise PCI DSS compliance program. This role is responsible for driving PCI strategy, governance … compliance assessments, audit readiness, and cross-functional remediation efforts to ensure the organization maintains compliance with PCI DSS requirements while reducing security and regulatory risk. Key Duties: Lead the enterprise PCI DSS compliance program and serve as the primary PCI SME. Manage annual PCI ...

owns policy, risk and regulatory alignment. As Security GRC Manager, reporting to the CISO, you will lead a team of three that turns PCI DSS, SWIFT CSP, ISO 27001, PCI PIN, PCI MPoC and UK and EU regulation into clear, engineer-able and increasingly automated ways … stick, and make GRC an accelerator for engineering rather than a toll gate. For the next two to three years, the priority is PCI DSS and SWIFT CSP excellence, built to scale towards the expectations of a regulated UK and European financial entity. ResponsibilitiesLead and develop the Security ...

CYBER SECURITY LEAD | PCI-DSS, Data Security, Governance, Compliance, Retail Over 1,000,000,000 (1bn) card transactions per annum Payment Card Industry Data Security Standards (PCI-DSS) Data Security, IT Governance, Compliance ISO 27001, Cyber Essentials, GDPR, NIST, CISSP, CISM This huge Retail & Hospitality business … seeking an experienced Cyber Security Lead with extensive PCI-DSS compliance and governance experience to work in partnership with numerous business Stakeholders and Peers in taking ownership of the organisation's cyber security strategy, policies and controls. You will lead on security incident responses, manage vulnerability and penetration ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial AwarenessKey ResponsibilitiesPayment Platform Ownership Own the end-to-end payment card processing environment … senior escalation point for complex incidents and service issues. Maintain operational procedures, technical documentation, and support models. Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team LeadershipProject and Change Management Lead the delivery of payment-related projects and strategic initiatives. Coordinate internal stakeholders, suppliers ...

Travis Perkins plc is now hiring for a proactive and detail-orientedGovernance, Risk, and Compliance (GRC) Infosec Manager (PCI … join our central Information Security team. This is a high-visibility, specialised role focused on leading our Group-wide Payment Card Industry (PCI) compliance ecosystem. Reporting directly to the Senior GRC Infosec Manager, you will serve as the primary subject matter expert and point of contact for external Qualified ...

security governance, operations, compliance, and risk management across a complex technology estate spanning payments, healthcare, and B2B SaaS. With ongoing M&A activity, active PCI-DSS obligations, and a rapidly evolving platform landscape, you'll play a critical role in protecting our customers, supporting business growth, and embedding … Oversee security operations, including threat detection, incident response, and remediation Act as the executive lead during security incidents and manage external stakeholder communications Own PCI-DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group's Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials ...

multi-region AWS infrastructure, payment pipelines and payment pages, wallets holding members' money, the cardholder and personal data behind them, and a regulatory perimeter - PCI DSS, DORA, Bank of Lithuania and FCA rules - that rises every year. Working at staff/senior staff level as an individual contributor … roadmap that shapes how Vinted Pay defends its infrastructure and payment assets, rather than reacting to the next audit. Turn regulation into engineering: map PCI DSS, DORA, and Bank of Lithuania and FCA requirements into practical, automated security controls and engineering guardrails - compliance as a by-product ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial AwarenessKey ResponsibilitiesPayment Platform Ownership Own the end-to-end payment card processing environment … senior escalation point for complex incidents and service issues. Maintain operational procedures, technical documentation, and support models. Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team LeadershipProject and Change Management Lead the delivery of payment-related projects and strategic initiatives. Coordinate internal stakeholders, suppliers ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial AwarenessKey ResponsibilitiesPayment Platform Ownership Own the end-to-end payment card processing environment … senior escalation point for complex incidents and service issues. Maintain operational procedures, technical documentation, and support models. Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team LeadershipProject and Change Management Lead the delivery of payment-related projects and strategic initiatives. Coordinate internal stakeholders, suppliers ...

flows. Manage dispute and chargeback processes — and configure and monitor fraud tooling (e.g. Stripe Radar, 3D Secure) to balance fraud prevention with conversion. Own PCI-DSS compliance for payment processing — and triage and resolve causes of conversion drop-off. Own and develop the commercial relationship with Stripe … rolled out to plan in target markets, with adoption and conversion tracked and reported. Disputes, chargebacks and fraud managed within agreed risk tolerances, with PCI-DSS compliance maintained at all times. Stripe and other payment vendor relationships (contract, pricing) actively managed, with cost-benefit analyses delivered to support ...

authentication and authorisation mechanisms are in placeEngineer and automate technical controls within GCP to ensure and demonstrate continuous compliance with stringent standards such as PCI DSS and 3DSDrive security infrastructure deployments across our growing environmentsPerform regular security assessments, audits, threat modelling and architecture design reviews to identify risks … deploying per-market for different banks' regulatorsHands-on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSSExperience automating security controls and compliance checks against standards and frameworks including SOC 2, ISO 27001 and PCI DSS/3DSContainer security ...

party integrations. Support security incident investigations by providing architectural expertise and remediation guidance. Ensure alignment with applicable security standards including ISO 27001, NIST, OWASP, PCI DSS, and COBIT. Work with governance, risk, and compliance teams to manage security risks and audits. Mentor security engineers and stakeholders while promoting … Understanding of secure software development practices, DevSecOps, vulnerability management, and cloud-native security controls. Familiarity with industry standards and frameworks including ISO 27001, NIST, PCI DSS, OWASP, and COBIT. Strong analytical, problem-solving, and stakeholder management skills. Ability to communicate complex security concepts to technical and non-technical ...

engineering and business units. Compliance & Governance Alignment: Ensure technical security controls natively satisfy key regulatory frameworks—including ISO 27001, ISO42001, SOC 1/2, PCI DSS & 3DS, CSA C-STAR, and DORA.Pragmatic Technical Advisory: Translate high-level security requirements into actionable, practical guidance for engineering teams without creating … integration, data privacy, and model risk management. Frameworks & Compliance: Hands-on experience mapping technical controls to ISO 27001, ISO42001, SOC 1/2, PCI DSS & 3DS, CSA C-STAR, and DORA.Programme Delivery: Strong project and programme management skills, with a proven track record of bringing complex security initiatives ...

security investigations and overseeing remediation after incidents or identified risks Driving compliance with security policies, standards and regulations, including ISO 27001, Cyber Essentials and PCI-DSS Managing security audits, risk assessments and improvement plans Delivering security reporting, metrics and risk updates to senior stakeholders and governance forums Working … response, risk management and security governance Experience developing and implementing security policies, controls and improvement programmes A strong understanding of ISO:27001, Cyber Essentials, PCI-DSS and wider security best practice Excellent stakeholder management and communication skills, and the ability to influence at all levels Experience leading teams ...

containment, forensics, root cause analysis, and post-incident hardening. Partner with Privacy/Compliance so platform controls satisfy SOC 2 Type II, ISO 27001, PCI DSS, and GDPR, and design decisions stay defensible and auditable. Scale security through people. Build a Security Champions program and secure coding enablement … bounty/pentest program, and driving remediation across teams you don't manage. Strong working knowledge of SOC 2 Type II, ISO 27001, PCI DSS, and GDPR.Ability to turn complex security concepts into clear guidance for engineers and risk-based recommendations for executives. Excellent English, written and verbal. ...

mentor a team of governance specialists, helping one another succeed through close collaboration . Lead the global compliance and certification programmes (including ISO 27001, PCI-DSS, NIS2, and DORA) across all active markets. Communicate security strategy, risks, and governance updates to Director-level stakeholders, C-level executives … security governance with broader business ambitions. What will you bring to the team? Comprehensive expertise in security frameworks and regulations (GDPR, ISO 27001, NIS2, PCI-DSS, DORA). Proven capability to develop a deep understanding of internal and external partners to align security with business goals. Strong leadership ...

governance. Key responsibilities include: Managing and enhancing cyber security governance and compliance frameworks. Owning and developing the organisation's GRC platform. Leading PCI DSS compliance activities and supporting audit requirements. Managing supplier security assurance and third-party risk assessments. Advising projects and stakeholders on cyber security and compliance … requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology initiatives. We're keen to speak with cyber security, risk, governance and compliance ...

projects aligned with the wider Information Security Strategy Provide authoritative guidance on regulatory requirements, data protection and security frameworks including ISO 27001, NIST, PCI DSS and GDPR Oversee security governance across projects, procurement and development activity, ensuring risks are addressed throughout the SDLC and DPIA process Maintain information … CISSP, CISM, CISA, an MSc or an equivalent recognised qualification Proven experience managing ISO 27001 and other security governance frameworks such as NIST or PCI DSS Strong understanding of data protection and regulatory requirements including GDPR, FCA, ICO and PRA expectations Experience assessing and managing supplier security risks ...

security hardening and infrastructure upgrades. Support corporate IT infrastructure, including Google Workspace, device management and endpoint security. Contribute to infrastructure security and compliance, including PCI-DSS requirements. Identify opportunities to automate processes and modernise legacy infrastructure. Skills & Experience Required We're looking for an experienced Infrastructure Engineer, Systems … Experience with any of the following would be advantageous: Google Kubernetes Engine (GKE) and wider GCP services. Cassandra, ScyllaDB or other distributed database technologies. PCI-DSS, ISO 27001 or SOC 2 compliance environments. GitOps, ArgoCD or Kustomize. Istio or other service mesh technologies. Cloudflare, including ...

security hardening and infrastructure upgrades. Support corporate IT infrastructure, including Google Workspace, device management and endpoint security. Contribute to infrastructure security and compliance, including PCI-DSS requirements. Identify opportunities to automate processes and modernise legacy infrastructure. Skills & Experience Required We're looking for an experienced Infrastructure Engineer, Systems … Experience with any of the following would be advantageous: Google Kubernetes Engine (GKE) and wider GCP services. Cassandra, ScyllaDB or other distributed database technologies. PCI-DSS, ISO 27001 or SOC 2 compliance environments. GitOps, ArgoCD or Kustomize. Istio or other service mesh technologies. Cloudflare, including ...

infrastructure upgrades. \n Support corporate IT infrastructure, including Google Workspace, device management and endpoint security. \n Contribute to infrastructure security and compliance, including PCI-DSS requirements. \n Identify opportunities to automate processes and modernise legacy infrastructure. \n \n Skills & Experience Required \n We're looking for an experienced … following would be advantageous: \n \n Google Kubernetes Engine (GKE) and wider GCP services. \n Cassandra, ScyllaDB or other distributed database technologies. \n PCI-DSS, ISO 27001 or SOC 2 compliance environments. \n GitOps, ArgoCD or Kustomize. \n Istio or other service mesh technologies. \n Cloudflare, including ...

broad, complex problems. Key Duties: As the lead subject matter expert in technology compliance, ensure the vulnerability management program aligns with regulatory requirements (e.g., PCI-DSS, HIPAA, NIST, ISO 27001) and integrates with other security tools such as SIEM, CMDB, and ticketing systems. Define long-term strategy … scope, schedule, budgeting, risk evaluation, quality, integration, staffing, and communications. Knowledge of security regulations (e.g., Sarbanes-Oxley, Payment Card Industry Data Security Specification PCI DSS , Health Insurance Portability and Accountability Act HIPAA ) and standards (e.g. ISO 27001, NIST SP800-series). Excellent verbal and written communication skills. High ...

with operating in a regulated environment. We are a regulated financial institution, and you would be supporting our compliance capabilities to maintain alignment with PCI-DSS, ISO27001, DORA, and many more. A developer and engineering mindset. A practical understanding of how software is built in a professional environment … reshape how a scaling engineering organisation builds software securely. Direct exposure to banking-licence-scale security work in a regulated payments environment, with PCI DSS, DORA, and GDPR as live constraints on the work. Room to grow: Building and growing your own capability is mutually beneficial ...

Solution Architect/Enterprise Security Architect. Strong understanding of cloud and infrastructure security. Experience working within regulated or highly controlled enterprise environments. Knowledge of PCI DSS and Cyber Essentials Plus environments. Understanding of recognised ISO security standards, particularly ISO/IEC 27001, would be beneficial. Knowledge … cloud security principles. Experience conducting technical design reviews and architecture assurance. Strong risk-management and stakeholder-management skills. Skills enterprise security cloud security pci dss cyber security iso Employee Value Proposition Remote Working 4- 6 Month Initial Contract Inside IR35 Job Title: Security Solution Architect Location: London ...

technologies. Track emerging threats and assess how they could affect the organisation. Align security practices with standards such as ISO 27000 series, PCI DSS, COBIT, NIST and OWASP. Identify security risks and recommend proportionate controls and remediation. About You Broad knowledge of modern enterprise technology, including Cloud … threat modelling frameworks such as STRIDE and MITRE ATT&CK. Significant knowledge of endpoint, network, cryptography and IAM security. Awareness of ISO 27000 series, PCI DSS, COBIT, NIST and OWASP. A security management certification such as CISSP, CISM or CCSP, and a technical security certification such ...