1 to 25 of 325 PCI DSS Jobs

what makes us truly One Team. Who are we looking for? We’re looking for a Senior Security Consultant with a strong focus on PCI DSS to join our growing Cyber Security Consulting practice. You’ll have experience delivering client-facing cyber security and compliance engagements, with particular … knowledge of PCI DSS and payment security environments. Alongside PCI DSS, you’ll have broader cyber security knowledge and experience across areas such as ISO 27001, NIST, NCSC CAF, cyber risk management and security assessments. This broader experience is important in our consulting roles and mirrors ...

aligned to regulatory, client, and internal requirements. The role partners with business, technology, audit, and group stakeholders to drive practical compliance outcomes across PCI DSS, DORA, and other regulatory and risk frameworks, internal control assurance, security awareness compliance, and client due diligence activity. Crucial to this role … Analyst is responsible for supporting the day-to-day operation of PayTech's security compliance activities. This includes maintaining evidence and documentation, assisting with PCI DSS readiness, coordinating responses to internal audit and client assurance requests, owning the security awareness programme and activities, liaising with our learning teams ...

owns policy, risk and regulatory alignment. As Security GRC Manager, reporting to the CISO, you will lead a team of three that turns PCI DSS, SWIFT CSP, ISO 27001, PCI PIN, PCI MPoC and UK and EU regulation into clear, engineer-able and increasingly automated ways … stick, and make GRC an accelerator for engineering rather than a toll gate. For the next two to three years, the priority is PCI DSS and SWIFT CSP excellence, built to scale towards the expectations of a regulated UK and European financial entity. Responsibilities Lead and develop ...

Analyst - Payments/PCI-DSS/ISO Manchester - office based 4 days a week, remote 1 day a week £55-60k pa A successful payment technology company are seeking a GRC Analyst to join their growing Security team and be responsible for risk management, compliance monitoring … governance support as well as 3rd party vendor risk management. As a GRC Analyst you will ensure compliance with all relevant regulations including PCI-DSS, GDPR, ISO 27001, NIS Regulations and the Data Protection Act 2018. Any experience with Attestation of Compliance (AoC) is beneficial. This role will ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership Own the end-to-end payment card … senior escalation point for complex incidents and service issues. Maintain operational procedures, technical documentation, and support models. Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management Lead the delivery of payment-related projects and strategic initiatives. Coordinate internal stakeholders, suppliers ...

Security Architect | London | £90,000-£110,000 | PCI DSS 4.0 | GCP | GKE We're working with a growing, PE-backed technology business operating at the heart of the global payments and travel ecosystem. Following significant investment and continued product growth, they are strengthening their security capability and looking … come back to you ASAP What you'll be doing Own and develop security architecture across cloud, applications, APIs and infrastructure Support and maintain PCI DSS 4.0 compliance, including audit and evidence requirements Strengthen security across a predominantly GCP and Kubernetes/GKE environment Drive DevSecOps and Shift ...

security governance, operations, compliance, and risk management across a complex technology estate spanning payments, healthcare, and B2B SaaS. With ongoing M&A activity, active PCI‐DSS obligations, and a rapidly evolving platform landscape, you'll play a critical role in protecting our customers, supporting business growth, and embedding … Oversee security operations, including threat detection, incident response, and remediation Act as the executive lead during security incidents and manage external stakeholder communications Own PCI‐DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group's Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials ...

security governance, operations, compliance, and risk management across a complex technology estate spanning payments, healthcare, and B2B SaaS. With ongoing M&A activity, active PCI-DSS obligations, and a rapidly evolving platform landscape, you'll play a critical role in protecting our customers, supporting business growth, and embedding … Oversee security operations, including threat detection, incident response, and remediation Act as the executive lead during security incidents and manage external stakeholder communications Own PCI-DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group's Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials ...

experience and simplify compliance. Its patented cloud-based technologies protect sensitive data across all customer interactions and channels, ensuring compliance with industry standards like PCI DSS while reducing fraud risk and strengthening trust. Founded in 2009 as Semafone, Sycurio supports organizations in over 50 countries across five continents … your default for scaffolding, tests, documentation and proofs of concept, and the review and verification guardrails that let us do this safely in a PCI DSS Level 1 environment. Find repetitive work and automate it. How we work PCI DSS Level 1 environment: peer review, test ...

multi‐region AWS infrastructure, payment pipelines and payment pages, wallets holding members' money, the cardholder and personal data behind them, and a regulatory perimeter - PCI DSS, DORA, Bank of Lithuania and FCA rules - that rises every year. Working at staff/senior staff level as an individual contributor … roadmap that shapes how Vinted Pay defends its infrastructure and payment assets, rather than reacting to the next audit. Turn regulation into engineering: map PCI DSS, DORA, and Bank of Lithuania and FCA requirements into practical, automated security controls and engineering guardrails - compliance as a by‐product ...

authorisation mechanisms are in place Engineer and automate technical controls within GCP to ensure and demonstrate continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify … market for different banks' regulators Hands-on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2, ISO 27001 and PCI DSS/ ...

evolving technology risks while driving operational and control improvements. You’ll have a particular focus of this role will be supporting the delivery of PCI DSS and SWIFT Cyber Security Programme (CSP) advisory and assurance engagements across financial services, payments, fintech and broader regulated sectors. This role offers … small teams and working collaboratively with strong project management and organisational skills to manage multiple engagements A strong understanding of payment security principles and PCI DSS requirements would be an advantage A current PCI DSS Qualified Security Assessor (QSA) certification. Additional certifications such as CISSP, CISA ...

scales without friction Defining and enforcing cloud security architecture standards, guardrails, and policy-as-code inline with industry best practices including NIST, CIS, and PCI DSS. Use Wiz or equivalent CNAPP/CSPM to continuously assess, prioritise, and drive remediation of misconfigurations and vulnerabilities against CIS, NIST, and PCI … DSS benchmarks. Security Monitoring Fine tune, and maintain modern SIEM platform (e.g. Sentinel) including KQL detection rules, workbooks, logging pipelines, and AI-assisted alert triage. Map detection coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps across the cloud estate. Maintain alignment to PCI ...

Bridewell Consulting Limited is seeking a Senior Security Consultant focused on PCI DSS to join its Cyber Security Consulting practice in the UK. You will lead client engagements, define PCI DSS scope, perform gap assessments, and help achieve and maintain compliance across merchant and service provider ...

compliance activities. Working closely with IT, security and business stakeholders, you’ll help identify and mitigate risk, maintain compliance with key regulatory requirements (including PCI DSS and GDPR), and contribute to building a strong culture of security awareness. Key Responsibilities Information Security Frameworks – Support ongoing alignment with … development and maintenance of security policies, standards and procedures. Control Assurance – Assess security controls and provide recommendations for improvement. Compliance Activities – Support PCI DSS compliance requirements and collaborate with relevant stakeholders on GDPR adherence. Business Continuity & Disaster Recovery – Assist with BC/DR planning, testing and documentation. About ...

Bridewell is recruiting a Senior Security Consultant focused on PCI DSS to join our Cyber Security Consulting practice in the UK. You will lead client-facing engagements, assess payment environments, define scope, and drive compliance across merchant and service provider setups. Beyond PCI DSS ...

SaaS offering. The ideal candidate combines deep product management expertise with strong knowledge of data security posture management, compliance auditing and regulatory frameworks (HIPAA, PCI-DSS, GDPR, CMMC, SOC 2), plus fluency in the SIEM, SOAR, and SOC technologies (Splunk, Microsoft Sentinel, IBM QRadar, ServiceNow, and similar) that … SOAR-adjacent categories to inform positioning. Product Execution Partner with engineering to deliver curated, audit-ready compliance capabilities mapped to frameworks such as HIPAA, PCI-DSS, GDPR, CMMC, and SOC 2, alongside real-time alerting, rapid forensic investigation, behavioral analytics (UEBA), and AI-driven threat detection and response ...

ensure security is embedded by design, not added as an afterthought. Your work will span from threat modeling and risk assessment to architecting PCI‐DSS compliant solutions, building the secure infrastructure that underpins our global mobility and payments platforms. This is your opportunity to influence how a fast … threat modeling, proactively identifying vulnerabilities and mitigation strategies. Develop and maintain security policies and frameworks aligned with NIST, ISO 27001, and CIS Controls. Lead PCI‐DSS architecture and compliance, ensuring both front‐ and back‐office systems meet standards. Guide and mentor teams in best‐practice security engineering, fostering ...

some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside … developmentDevelop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us)Develop systems, automations, and methods of security observability to push the GRC engineering ...

some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside … Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us)- Develop systems, automations, and methods of security observability to push the GRC engineering ...

some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside … Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us) Develop systems, automations, and methods of security observability to push the GRC engineering ...

some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside … Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us) Develop systems, automations, and methods of security observability to push the GRC engineering ...

colleagues safe. As our IT Security Manager, you'll be at the heart of protecting our organisation from evolving cyber threats while leading our PCI-DSS compliance programme and driving security best practice across the business. This is a hands-on role where you'll have the autonomy … infrastructure and systems. Own security incident response activities, from investigation through to remediation. Manage vulnerability assessments and penetration testing programmes. Lead our Tier 1 PCI-DSS compliance programme and annual audit process. Act as the key contact for auditors and assessors. Maintain security documentation, evidence and compliance records. ...

organisation's Information Security Management System (ISMS) , including policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST/CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess … Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO 27001/27002, NIST, CIS Controls, PCI-DSS and Cyber Essentials Plus . Experience developing and maintaining security policies and procedures. Experience with third-party/vendor risk management ...

local government frameworks.Ensure that security compliance efforts are aligned with relevant laws and regulations, and lead audits to verify compliance with standards like PSN, PCI-DSS, etc.Develop and manage ongoing assurance processes to evaluate the effectiveness of security controls, including security testing, penetration testing, and vulnerability management programs.Coordinate … profile contained in the Essential service Capital scheme (ESP).In-depth knowledge of cybersecurity frameworks (e.g. Local Government CAF) and regulatory compliance requirements (PSN, PCI-DSS).In-depth knowledge of cybersecurity technologies, tools, and methodologies (e.g., SIEM, IDS/IPS, firewalls, DLP).In-depth understanding of cybersecurity standards ...