1 to 25 of 125 PCI DSS Jobs in London

what makes us truly One Team. Who are we looking for? We’re looking for a Senior Security Consultant with a strong focus on PCI DSS to join our growing Cyber Security Consulting practice. You’ll have experience delivering client-facing cyber security and compliance engagements, with particular … knowledge of PCI DSS and payment security environments. Alongside PCI DSS, you’ll have broader cyber security knowledge and experience across areas such as ISO 27001, NIST, NCSC CAF, cyber risk management and security assessments. This broader experience is important in our consulting roles and mirrors ...

owns policy, risk and regulatory alignment. As Security GRC Manager, reporting to the CISO, you will lead a team of three that turns PCI DSS, SWIFT CSP, ISO 27001, PCI PIN, PCI MPoC and UK and EU regulation into clear, engineer-able and increasingly automated ways … stick, and make GRC an accelerator for engineering rather than a toll gate. For the next two to three years, the priority is PCI DSS and SWIFT CSP excellence, built to scale towards the expectations of a regulated UK and European financial entity. Responsibilities Lead and develop ...

Security Architect | London | £90,000-£110,000 | PCI DSS 4.0 | GCP | GKE We're working with a growing, PE-backed technology business operating at the heart of the global payments and travel ecosystem. Following significant investment and continued product growth, they are strengthening their security capability and looking … come back to you ASAP What you'll be doing Own and develop security architecture across cloud, applications, APIs and infrastructure Support and maintain PCI DSS 4.0 compliance, including audit and evidence requirements Strengthen security across a predominantly GCP and Kubernetes/GKE environment Drive DevSecOps and Shift ...

Security Architect | London | £90,000-£110,000 | PCI DSS 4.0 | GCP | GKE We're working with a growing, PE-backed technology business operating at the heart of the global payments and travel ecosystem. Following significant investment and continued product growth, they are strengthening their security capability and looking … come back to you ASAP What you'll be doing Own and develop security architecture across cloud, applications, APIs and infrastructure Support and maintain PCI DSS 4.0 compliance, including audit and evidence requirements Strengthen security across a predominantly GCP and Kubernetes/GKE environment Drive DevSecOps and Shift ...

multi‐region AWS infrastructure, payment pipelines and payment pages, wallets holding members' money, the cardholder and personal data behind them, and a regulatory perimeter - PCI DSS, DORA, Bank of Lithuania and FCA rules - that rises every year. Working at staff/senior staff level as an individual contributor … roadmap that shapes how Vinted Pay defends its infrastructure and payment assets, rather than reacting to the next audit. Turn regulation into engineering: map PCI DSS, DORA, and Bank of Lithuania and FCA requirements into practical, automated security controls and engineering guardrails - compliance as a by‐product ...

authorisation mechanisms are in place Engineer and automate technical controls within GCP to ensure and demonstrate continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify … market for different banks' regulators Hands-on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2, ISO 27001 and PCI DSS/ ...

scales without friction Defining and enforcing cloud security architecture standards, guardrails, and policy-as-code inline with industry best practices including NIST, CIS, and PCI DSS. Use Wiz or equivalent CNAPP/CSPM to continuously assess, prioritise, and drive remediation of misconfigurations and vulnerabilities against CIS, NIST, and PCI … DSS benchmarks. Security Monitoring Fine tune, and maintain modern SIEM platform (e.g. Sentinel) including KQL detection rules, workbooks, logging pipelines, and AI-assisted alert triage. Map detection coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps across the cloud estate. Maintain alignment to PCI ...

Bridewell Consulting Limited is seeking a Senior Security Consultant focused on PCI DSS to join its Cyber Security Consulting practice in the UK. You will lead client engagements, define PCI DSS scope, perform gap assessments, and help achieve and maintain compliance across merchant and service provider ...

compliance activities. Working closely with IT, security and business stakeholders, you’ll help identify and mitigate risk, maintain compliance with key regulatory requirements (including PCI DSS and GDPR), and contribute to building a strong culture of security awareness. Key Responsibilities Information Security Frameworks – Support ongoing alignment with … development and maintenance of security policies, standards and procedures. Control Assurance – Assess security controls and provide recommendations for improvement. Compliance Activities – Support PCI DSS compliance requirements and collaborate with relevant stakeholders on GDPR adherence. Business Continuity & Disaster Recovery – Assist with BC/DR planning, testing and documentation. About ...

Bridewell is recruiting a Senior Security Consultant focused on PCI DSS to join our Cyber Security Consulting practice in the UK. You will lead client-facing engagements, assess payment environments, define scope, and drive compliance across merchant and service provider setups. Beyond PCI DSS ...

security role, with a track record of mentoring or coaching junior colleagues.Demonstrable experience managing security compliance against recognised frameworks (e.g. ISO 27001/27002, PCI-DSS) within an operating ISMS.Experience designing, building and operating protective monitoring/SIEM capability (e.g. Splunk, MS Sentinel or equivalent), including alerting, dashboards … face of information security for the whole business and a role model for junior members of the team.You'll own E.ON’s compliance across PCI-DSS, the Smart Energy Code, the Retail Energy Code, and IT General Controls/Financial IT systems controls- working alongside and steering external ...

senior escalation point for complex incidents and service issues. Maintain operational procedures, technical documentation, and support models. Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management Lead the delivery of payment-related projects and strategic initiatives. Coordinate internal stakeholders, suppliers … business value. Security and Compliance Lead the implementation and ongoing management of Point-to-Point Encryption (P2PE) across the estate. Ensure compliance with PCI DSS and other applicable payment industry standards. Support security audits, assessments, and remediation activities. Maintain awareness of emerging threats and regulatory developments. Serve ...

guardrails, secrets and key management, and policy as code. Has prepared the evidence for an external security audit or certification, such as ISO 27001, PCI DSS, Cyber Essentials Plus, or SOC 2, and answered the auditors' questions in the audit sessions. Knows what to disclose, what to defer … scheduled. Can describe the argument that worked and the one that did not. Preferred skills & experience Has taken a new product through ISO 27001, PCI DSS, or Cyber Essentials Plus certification. Has worked under a formal data classification scheme set by a customer or a regulator, and knows ...

SLAs, SOC performance) to the Head of Information Security and relevant governance forums (e.g. GDPR Steering Committee, security committees). Support compliance activities across PCI DSS, UK GDPR, and ISO 27001/NIST CSF-aligned control requirements as they relate to operational security and monitoring. Maintain evidence … Familiarity with the three lines of defence model and ability to operate credibly across both first-line delivery and second-line oversight. Understanding of PCI DSS, UK GDPR, and NIST CSF control frameworks as applied to operational security. Comfortable working in a lean team, prioritising pragmatically, and balancing ...

Framework and other recognised standards. Maintain effective security policies, standards and controls, ensuring they are understood, embraced, evidenced and continuously improved. Support compliance with PCI DSS, UK GDPR, the Data Protection Act 2018 and relevant FCA expectations. Strengthen cyber operations and resilience Lead security monitoring, threat management, vulnerability … across security operations, governance, risk and compliance, architecture, engineering, third-party risk, assurance and operational resilience. Strong practical knowledge of ISO/IEC 27001, PCI DSS, UK GDPR, the Data Protection Act 2018 and recognised control frameworks such as NIST. A solid understanding of technology risk, risk appetite ...

compliance matters Driving identification, escalation, and resolution of cybersecurity GRC risks and issues Supporting and maintain cybersecurity compliance certifications and initiatives (e.g., ISO, PCI, HIPAA) Producing metrics, KPIs, and executive-level reporting to support risk-based decision making Leading the redesign of the security training program, including role-based … data protection programs Working knowledge of security and compliance frameworks such as ISO 27001/27701, ISO 27017/27018, ISO 42001, HIPAA, PCI DSS, NIST 800-53/800-171, FedRAMP, GovRAMP, etc. Experience implementing and operating GRC platforms and security programs Experience designing, delivering, or modernizing ...

posture. Key Responsibilities Conduct security risk assessments, maintain risk registers, track risks and recommend appropriate mitigations and compensating controls. Perform IT control audits covering PCI DSS, ISO 27002, information security management systems (ISMS), infrastructure and web applications. Support ISO 27001 implementation and maintain information security policies, standards … standards. Required Skills and Experience Experience in cybersecurity, information security, IT risk management or security governance and compliance. Knowledge of ISO 27001, ISO 27002, PCI DSS, NIST and CIS frameworks. Experience conducting risk assessments, IT security audits and remediation tracking. Hands-on experience with vulnerability management and application ...

through to completion. Document and uphold secure-by-design principles and architecture governance, and enforce policy-as-code frameworks aligned with NIST, CIS, and PCI DSS. Set the monitoring scope and priorities for CNAPP/CSPM tooling (e.g. Wiz or equivalent), defining which misconfigurations and vulnerabilities matter most against … NIST, and PCI DSS benchmarks, and holding engineering teams accountable to remediation outcomes. Work with Security Operations to shape cloud logging and detection requirements, ensuring our SIEM has the right visibility across the estate. Collaborate with senior stakeholders to articulate security risks and mitigations in terms that support ...

help establish consistent DevOps and platform engineering standards. You will also ensure that our deployment and automation processes meet security and regulatory requirements, including PCI DSS, ISO 27001 and Cyber Essentials.Experience within financial services, a regulated environment or another service-critical industry would be particularly valuable.This … technologies • AWS certifications, such as Solutions Architect Professional, DevOps Engineer Professional or Security Specialty • Experience mentoring engineers or helping set technical and platform standards • PCI DSS or other regulated-industry experience • SRE principles, error budgets, ITIL or service management practices • Automated testing and quality gates within CI/ ...

technical levels, supporting board-level decision‐making while driving operational security improvements aligned to recognised standards such as NIST CSF, ISO 27001, DORA, PCI‐DSS, and MITRE ATT&CK. Reporting To: Director/Head of Cyber Security Location: London (Hybrid) Employment Type: Full‐Time Salary … OWASP Top 10). Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with ISO 27001. Ensure alignment with GDPR, PCI‐DSS, DORA, NIST CSF, COBIT, SANS, and related frameworks. Develop security policies, SOPs, and governance documentation. Conduct IT resilience and cloud security audits. ...

with problems involving several concrete variables in standard situations is required. Candidate must possess a basic understanding of best practice security processes such as PCI DSS, Cobit, NIST, SOC2 Controls, and an understanding of ISO controls, etc. Candidate must demonstrate an understanding of modern security solutions, controls … strongly preferred applicants possess at least 5 years of management experience. Excellent understanding of security standards/certifications such as SOC 2, ISO 27001, PCI DSS, Cyber Essentials (Plus). A good working knowledge of the Travel Industry will be a bonus. Working knowledge of the following systems ...

where some products are today outside the standard tooling. Governance, risk and compliance and vendor management Own ISO 27001, SOC 1, SOC 2 and PCI DSS compliance, the audit calendar, the compliance automation platform and the relationship with our auditors. Work with legal and the Data Protection Officer … facing those customers on security matters. Working knowledge of ISO 27001 and SOC 2, and experience of being accountable for audits and certifications. PCI DSS experience is an advantage. Practical understanding of cloud security on AWS and Azure, Kubernetes-based platforms, infrastructure as code and modern CI/ ...

with operating in a regulated environment. We are a regulated financial institution, and you would be supporting our compliance capabilities to maintain alignment with PCI-DSS, ISO27001, DORA, and many more. A developer and engineering mindset. A practical understanding of how software is built in a professional environment … reshape how a scaling engineering organisation builds software securely. Direct exposure to banking-licence-scale security work in a regulated payments environment, with PCI DSS, DORA, and GDPR as live constraints on the work. Room to grow: Building and growing your own capability is mutually beneficial ...

critical systems. Identify architectural and technical security risks and provide pragmatic recommendations that balance security with business objectives. Support security and compliance initiatives across PCI DSS, GDPR, ISO 27001 and SOC 2. Work with internal stakeholders and external auditors during security assessments and certification programmes. Promote secure engineering … APIs, API gateways and modern integration architectures. Hands-on knowledge of authentication, identity and access management. Experience with security and compliance frameworks such as PCI DSS, GDPR, ISO 27001 and/or SOC 2. Knowledge of vulnerability management, risk assessment and security governance. Strong communication skills with ...

løsninger til beskyttelse af slutpunkter Yde rådgivning om omfattende risikostyringsstrategier og bistå med compliance-indsatser i forbindelse med rammeværker såsom ISO 27001, GDPR, HIPAA, PCI-DSS og branchespecifikke regler Være mentor for, vejlede og udvikle junior sikkerhedsmedarbejdere og dermed fremme en samarbejdskultur præget af kontinuerlig læring og sikkerhedsbevidsthed … sikkerhedsværktøjer og -teknologier (SIEM, IDS/IPS, firewalls, endpoint-beskyttelse, sårbarhedsscannere) Indgående kendskab til compliance-rammer og lovgivningsmæssige krav (ISO 27001, GDPR, HIPAA, PCI-DSS eller lignende) Fremragende analytiske og problemløsende evner med stor opmærksomhed på detaljer Stærke kommunikations- og præsentationsevner med evnen til at forklare tekniske begreber ...