1 to 25 of 86 PCI DSS Jobs in London

activities, and act as a trusted point of contact for internal teams and external assessors.You will work across Checkout's core compliance frameworks including PCI DSS v4.0.1, ISO 27001, SOC 2, and emerging regulatory obligations such as DORA and the EU AI Act, supporting our global footprint across … regulated markets worldwide.How You'll Make an ImpactGovernance, Risk and Compliance Programme ManagementOwn and manage defined workstreams within Checkout's GRC programme, including PCI DSS v4.0.1, ISO 27001, SOC 2, and relevant regulatory obligations across our global licensed entities.Coordinate control evidence collection activities across internal teams, ensuring continuous ...

control testing. The role requires an understanding of security and technology controls and frameworks, including working with a variety of standards, e.g. ISO27001, ISO22301, PCI DSS, PCI PIN, Swift, ISAE3000, etc. The applicant must have experience with at least one security standard and a proven ability … audits. - Support the assessment and validation of controls and processes against a variety of security standards and obligations. - Assist in managing certifications (e.g., ISO27001, PCI DSS) and assurance activities (e.g., ISAE3000). - Evaluate compliance with internal policies, standards, regulatory requirements, and customer obligations. - Prepare clear and accurate control ...

security governance, operations, compliance, and risk management across a complex technology estate spanning payments, healthcare, and B2B SaaS.With ongoing M&A activity, active PCI-DSS obligations, and a rapidly evolving platform landscape, you'll play a critical role in protecting our customers, supporting business growth, and embedding security … Oversee security operations, including threat detection, incident response, and remediation Act as the executive lead during security incidents and manage external stakeholder communications Own PCI-DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group's Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership * Own the end-to-end payment card … senior escalation point for complex incidents and service issues. * Maintain operational procedures, technical documentation, and support models. * Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management * Lead the delivery of payment-related projects and strategic initiatives. * Coordinate internal stakeholders, suppliers ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership * Own the end-to-end payment card … senior escalation point for complex incidents and service issues. * Maintain operational procedures, technical documentation, and support models. * Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management * Lead the delivery of payment-related projects and strategic initiatives. * Coordinate internal stakeholders, suppliers ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership * Own the end-to-end payment card … senior escalation point for complex incidents and service issues. * Maintain operational procedures, technical documentation, and support models. * Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management * Lead the delivery of payment-related projects and strategic initiatives. * Coordinate internal stakeholders, suppliers ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial AwarenessKey ResponsibilitiesPayment Platform Ownership• Own the end-to-end payment card processing environment … senior escalation point for complex incidents and service issues.• Maintain operational procedures, technical documentation, and support models.• Ensure compliance with industry standards, including PCI DSS and P2PE requirements.Team LeadershipProject and Change Management• Lead the delivery of payment-related projects and strategic initiatives.• Coordinate internal stakeholders, suppliers, and business ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership* Own the end-to-end payment card … senior escalation point for complex incidents and service issues.* Maintain operational procedures, technical documentation, and support models.* Ensure compliance with industry standards, including PCI DSS and P2PE requirements.Team LeadershipProject and Change Management* Lead the delivery of payment-related projects and strategic initiatives.* Coordinate internal stakeholders, suppliers, and business ...

management including PIN keys, DUKPT, master/session key hierarchies, and TR-31 or TR-34 key exchange. Experience with key lifecycle management, PCI PIN and PCI-DSS scope experience is required.Application security at scale. SAST/DAST/SCA toolchain design and rollout. Threat modelling … publish runbooks, standards, ADRs, and reporting dashboards. If it isn't documented, it didn't happen.Comfort with a small team carrying real regulatory scope. PCI-DSS, PCI PIN, DORA and GDPR are constraints on the work, not optional context.Nice to have:Open source contributions or side projects ...

Senior Information Security Analyst - Audit & Compliance ISO27001, SOC2, PCI-DSS, NIST, GDPR London (Barbican). Hybrid. 2 days a week onsite. Up to £100k plus 8% bonus, pension, private medical etc We're working with a global technology partner to find a certified Information Security Analyst. This … Collaborate with IT & Security teams to identify and remediate vulnerabilities. What We're Looking For Strong knowledge of audit & compliance frameworks (ISO 27001,SOC2, PCI DSS, Cyber Essentials) Experience with CSOC tools such as Rapid7 InsightIDR or other SIEM solutions. Hands-on experience with internal/external audits ...

security scales without frictionDefining and enforcing cloud security architecture standards, guardrails, and policy-as-code inline with industry best practices including NIST, CIS, and PCI DSS.Use Wiz or equivalent CNAPP/CSPM to continuously assess, prioritise, and drive remediation of misconfigurations and vulnerabilities against CIS, NIST, and PCI … DSS benchmarks.Security MonitoringFine tune, and maintain modern SIEM platform (e.g. Sentinel) including KQL detection rules, workbooks, logging pipelines, and AI-assisted alert triage.Map detection coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps across the cloud estate.Maintain alignment to PCI DSS, SOC2, ISO27001 ...

alignment and be a key technical driver in the cyber security roadmapSOC Relationship: Design playbooks and tune detection with Arctic Wolf’s Concierge TeamCompliance: PCI-DSS audit cycle running smoothly; IR and DR plans tested and currentThe ideal candidate will have strong experience of Infrastructure and Network connectivity … along with experience in a Microsoft environment including 365, Entra ID and SharePoint. They will understand IT compliance audit processes such as PCI-DSS, as well as some hands-on cyber security experience. The role will offer plenty of autonomy and ownership over the cyber security roadmap ...

Azure Landing Zone security and connectivity, collaborating with Network Engineering to validate secure firewall and VPN configurations.Compliance & Risk: Support audit readiness for ISO 27001, PCI DSS, and Cyber Essentials Plus, ensuring all remediation progress is tracked and documented.Essential Skills & Experience:Experience: 5–10 years in cloud or infrastructure … with EDR (MDE), CSPM tools, and vulnerability management platforms.Security Principles: Practical understanding of Zero Trust architecture and secure-by-design methodologies.Compliance Knowledge: Familiarity with PCI DSS, NIST, and ISO 27001 frameworks.Desirable Skills:Awareness of AWS security fundamentals (Guard Duty, KMS, IAM Identity Center).Experience with Infrastructure as Code ...

lead all aspects of external audits and certifications supporting lottery customers, including but not limited to SOC 1, SOC 2, ISO 27001, WLA-SCS, PCI-DSS, and jurisdiction-specific requirements.Maintain audit readiness throughout all iLottery regions by conducting proactive control evaluations, identifying gaps, monitoring remediation progress, and ongoing … audit methodologies, internal controls, risk management, and governance frameworks.Experience with recognized industry benchmarks and certifications such as SOC 1, SOC 2, ISO 27001, PCI-DSS, WLA-SCS, NIST, COBIT, or comparable frameworks.Strong analytical, problem-solving, and decision-making capabilities.Excellent communication, presentation, and collaborator management skills.Ability to balance regulatory ...

.Manage and coordinate incident response, investigation, reporting and post-incident improvement actions.Maintain compliance and evidence for key standards/frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR, DSP Toolkit and wider public sector assurance requirements.Drive security awareness and practical adoption of secure ways of working … public sector, regulated, or complex enterprise environment.Knowledge of NCSC-aligned security principles and practical governance/assurance approaches.Security compliance and audit-readiness (e.g., PSN, PCI-DSS, GDPR, Cyber Essentials Plus and similar frameworks).Microsoft security tooling (e.g., Sentinel, Defender, and M365 E5 security capabilities); exposure to Copilot ...

wider Security function by participating in the on-call rota (once established in the role) and supporting compliance and certification activities, including GDPR, PCI DSS and ISO 27001.We'd love to hear from you if you have... Hands-on experience with Splunk, including developing and tuning detection rules … collaborate effectively across teams and explain technical concepts clearly to both technical and non-technical stakeholders. Experience supporting compliance frameworks such as GDPR, PCI DSS or ISO 27001 would be helpful but isn't essential.More information:Enjoy fantastic perks like private healthcare & dental insurance, a generous work from ...

DoingFramework & Regulatory Alignment: Help maintain, improve, and scale our security compliance programmes, ensuring ongoing alignment with standards such as SOC 2, ISO 27001, and PCI-DSS, as well as regulator expectations and UK GDPR.Risk & Mitigation: Collaborate on identifying security risks across the business - including emerging risks from … FinTech).Compliance & Risk Expertise: A strong, foundational understanding of security risk management principles and hands-on experience working with compliance frameworks (e.g. ISO 27001, PCI-DSS, or SOC 2).Risk-First & Pragmatic Mindset: A natural tendency to start with the "why" (the risk) rather than the checklist. ...

teams, and DPOs to understand their security requirements and design solutions that meet European regulatory standards (GDPR, EU AI Act, DORA, NIS2, SOC 2, PCI-DSS, and national regulator expectations).Lead technical deep-dives on network architecture, EU data residency, data retention and Zero Data Retention (ZDR) policies … applies to foundation models.Experience navigating compliance frameworks relevant to European financial services and insurance (DORA, NIS2, SOC 2, PCI-DSS, and national regulators' guidance on AI/ML such as FCA/PRA, BaFin, ACPR, FINMA).A track record of leading complex, high-stakes engagements with CISOs, security ...

technical driver in the cyber security roadmap SOC Relationship: Design playbooks and tune detection with Arctic Wolf's Concierge Team Compliance: PCI-DSS audit cycle running smoothly; IR and DR plans tested and current The ideal candidate will have strong experience of Infrastructure and Network connectivity, along with … experience in a Microsoft environment including 365, Entra ID and SharePoint. They will understand IT compliance audit processes such as PCI-DSS, as well as some hands-on cyber security experience. The role will offer plenty of autonomy and ownership over the cyber security roadmap and so would ...

ensure seamless operations and cost-effective solutions.Compliance and Risk Management: Collaborate with Risk and Compliance teams to ensure adherence to industry regulations (e.g., PSD2, PCI-DSS) while balancing operational efficiency and merchant satisfaction.Cost Optimization: Lead initiatives to reduce operational costs, optimize fee structures, and streamline reconciliation processes, driving … processing, settlement, and reconciliation, with the ability to balance merchant needs and business objectives.Experience navigating and ensuring compliance with relevant regulations (e.g., FCA, PSD2, PCI-DSS) in a payments environment.Strong negotiation skills with experience managing relationships with card schemes, acquirers, payment processors, and financial partners.A data-driven mindset ...

repeatable deployments across all locations.Develop and maintain network build standards, configuration templates, and technical runbooksEnsure all designs meet FinTech regulatory and security requirements (e.g., PCI-DSS, SOC2)Own the reference architecture and standard design patterns used for new office deployments and office expansions.Operations, Monitoring & User ExperienceProvide escalation support … segmentation, 802.1XFamiliarity with MPLS, VPLS, and internet circuit procurementExperience working with third-party vendors and ISPs across multiple geographiesComfortable working in a regulated environment (PCI-DSS, SOC2 awareness is a plus)DesirableCCNP/CCIE (Routing & Switching)Fortinet NSE 4-7 (Network Security)Exposure to network automation tooling (Ansible ...

bespoke enterprise/government security questionnaires.Compliance Knowledge: Working knowledge of Cyber Essentials Plus, ISO 27001, SOC 2 Type II, and at least one of PCI DSS, GDPR/UK GDPR, HIPAA, or FedRAMP.Technical Expertise: Strong technical understanding of security principles, architecture, and vulnerability management, including access control, encryption ...

security clearance to be considered. Technical Knowledge Security frameworks including ISO 27001, NIST CSF, CIS and NCSC guidance Regulatory landscape including GDPR and PCI DSS Familiarity with HMG and NCSC standards Modern technology environments: Cloud platforms such as Azure, AWS and Google Cloud Microsoft 365 Infrastructure and network ...

architectures.Understanding of software architecture principles, secure coding practices, application security testing, and developer enablement methodologies.Knowledge of industry security and compliance frameworks such as NIST, PCI DSS, ISO 27001, or equivalent regulatory standards.Experience with enterprise key management platforms, Hardware Security Modules (HSMs), cloud KMS services, secrets management platforms ...

rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute to incident detection ...