26 to 50 of 283 PCI DSS Jobs in the UK

senior escalation point for complex incidents and service issues. Maintain operational procedures, technical documentation, and support models. Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management Lead the delivery of payment-related projects and strategic initiatives. Coordinate internal stakeholders, suppliers … business value. Security and Compliance Lead the implementation and ongoing management of Point-to-Point Encryption (P2PE) across the estate. Ensure compliance with PCI DSS and other applicable payment industry standards. Support security audits, assessments, and remediation activities. Maintain awareness of emerging threats and regulatory developments. Serve ...

Azure Landing Zone security and connectivity, collaborating with Network Engineering to validate secure firewall and VPN configurations.Compliance & Risk: Support audit readiness for ISO 27001, PCI DSS, and Cyber Essentials Plus, ensuring all remediation progress is tracked and documented.Essential Skills & Experience:Experience: 5–10 years in cloud or infrastructure … with EDR (MDE), CSPM tools, and vulnerability management platforms.Security Principles: Practical understanding of Zero Trust architecture and secure-by-design methodologies.Compliance Knowledge: Familiarity with PCI DSS, NIST, and ISO 27001 frameworks.Desirable Skills:Awareness of AWS security fundamentals (Guard Duty, KMS, IAM Identity Center).Experience with Infrastructure as Code ...

Selfridges is seeking a PCI Assurance Analyst to own the PCI DSS program. You will interpret requirements, lead gap analyses, coordinate SAQs and AOCs, and work with QSAs, acquirers and brands to drive compliant outcomes. The role focuses on scoping, evidence validation, and remediation planning, with reporting … senior stakeholders and guidance on secure design for PCI scoped systems. Based in London, the position supports a strong compliance culture and risk-based decision making within IT #J-18808-Ljbffr ...

enjoys balancing technical security requirements with governance, compliance, and stakeholder engagement. Key Responsibilities Manage and maintain compliance with security standards and accreditations including PCI DSS, ISO 27001, ISO 22301, Cyber Essentials Plus and IT Health Checks. Conduct internal audits, control reviews, and risk assessments. Maintain and monitor … years' experience in a Security Manager or similar information security role. Strong understanding of cyber security, governance, risk, and compliance frameworks. Extensive knowledge of PCI DSS, ISO 27001, Cyber Essentials Plus, and data protection requirements. Experience with Microsoft 365, Azure, AWS, vulnerability management, and SIEM tools. Strong communication ...

Information Security Architecture & Engineering Lead (UK-based) The Information Security Architecture & Engineering Lead forms the technical heart of PCI Pal’s Information Security function. The role owns cloud architecture review, DevSecOps and secure SDLC practice, security automation and tooling, and security architecture strategy for the organisation, replacing reactive, post … secure coding practices. Experience threat-modelling applications and cloud workloads at the design stage, not just reviewing them after deployment. Working knowledge of PCI DSS v4.0.1. ISO/IEC 27001:2022; familiarity with ISO/IEC 42001:2023 is an advantage. Experience triaging and remediating findings from ...

privacy, securing our company and data against cyber threats. We operate in a highly secure global SaaS organization that holds multiple certifications such as PCI‐DSS, ISO/IEC 27001, SOC, HIPAA, IRAP and works with a large, federated customer base. Responsibilities Develop and lead a team … approach to staying updated with the latest security threats, vulnerabilities and mitigation techniques. Advantageous Skills and Experience Experience working on projects ensuring compliance with PCI DSS, ISO/IEC 27001, SOC, HIPAA, IRAP controls. Knowledge of security compliance standards relevant to the SaaS industry such as PCI ...

ideally within financial services, banking, or payments. Experience in InfoSec and Cyber Security. Experience setting up policies and processes in InfoSec area. Familiarity with PCI-DSS, ISO27001, SOC 2/3 or other global standards. Familiarity with regulatory requirements (DORA, PCI-DSS, PSD2, GDPR). Understanding … identify areas for improvement. Performing security risk and control assessments for new products or initiatives. Working with third party InfoSec auditors (penetration testing, PCI compliance etc.). Conduct regular risk assessments and vulnerability assessments to identify security gaps and develop appropriate mitigation plans. Conducting regulatory gap analysis for regulations ...

Automate legacy systems related to governance, risk, and compliance frameworks, including ISO 27001, PCI-DSS, DORA, UK Cyber Essentials, and relevant financial services regulations Engineer GRC workflows integrating ticketing, asset management, identity, and cloud platforms to support compliance by design Design and build scalable GRC architectures and automation … level summaries Fintech, payments industry, or IT audit background Familiarity with regulatory expectations and payment platform architectures Certifications such as CISM, CISSP, CISA, or PCI-related credentials A degree in Cybersecurity, Engineering, Computer Science, or Mathematics, or equivalent experience, is a plus Ability to work closely with colleagues without ...

Foundations, establishing centralized monitoring and alerting (via Wiz/Security Hub). Data Privacy & Compliance End-to-End Privacy: Own the GDPR and PCI-DSS compliance programmes, embedding "Privacy by Design" and data minimization directly into our delivery processes. Legal Partnership: Collaborate with Legal to manage DPAs, transfer … information security, including leadership-level responsibility Proven experience building and scaling security and privacy programmes within growing organisations Strong hands-on knowledge of GDPR, PCI-DSS, incident response, and resilience planning Experience working within cloud-first environments, ideally AWS Strong understanding of security within e-commerce, fintech ...

continually improving the organisation’s cyber security strategy, roadmap and governance framework. Maintaining compliance with FCA regulatory expectations and international security standards including PCI DSS, ISO 27001, DORA, PSD2, NIST and CIS Controls. Building and maintaining an effective cyber security governance framework, including policies, standards, risk management processes … Experience implementing and maintaining cyber security governance frameworks, policies, standards, procedures and security roadmaps. Experience managing security programs aligned to recognized frameworks such as PCI DSS, ISO 27001, NIST CSF, CIS Controls, SOC 2, DORA, PSD2 and SWIFT CSCF (where applicable). Experience leading regulatory, customer and certification ...

lead all aspects of external audits and certifications supporting lottery customers, including but not limited to SOC 1, SOC 2, ISO 27001, WLA-SCS, PCI-DSS, and jurisdiction-specific requirements.* Maintain audit readiness throughout all iLottery regions by conducting proactive control evaluations, identifying gaps, monitoring remediation progress … audit methodologies, internal controls, risk management, and governance frameworks.* Experience with recognized industry benchmarks and certifications such as SOC 1, SOC 2, ISO 27001, PCI-DSS, WLA-SCS, NIST, COBIT, or comparable frameworks.* Strong analytical, problem-solving, and decision-making capabilities.* Excellent communication, presentation, and collaborator management skills. ...

security architecture standards, patterns, blueprints, and reference architectures Ensure solutions align with organisational security policies, regulatory obligations, and industry frameworks including ISO 27001, NIS2, PCI DSS, and Zero Trust principles where applicable. What you’ll bring Hands-on experience conducting architecture risk assessments and creation of business cases. … Google Cloud is desirable. Understanding of DevSecOps, automation, and modern software delivery practices is desirable. Experience supporting regulatory requirements such as NIS2, PCI DSS, GDPR, SOX, or similar frameworks. Relevant industry certifications such as CISSP, SABSA, TOGAF, CCSP, Azure Security Engineer, or equivalent qualifications is desirable. Benefits ...

accepted. Ensure penetration testing and remediation activities align with relevant security standards, regulatory requirements and industry best practice, including OWASP, NIST, ISO 27001, PCI-DSS, GDPR and CAF. Ensure appropriate governance, documentation and evidence is maintained throughout the testing lifecycle. Provide assurance over the quality and effectiveness … network, infrastructure and/or cloud penetration testing. Familiarity with vulnerability management and security operations processes. Experience working within environments subject to ISO 27001, PCI-DSS, GDPR or CAF requirements. What We're Looking For The successful candidate will be someone who can combine strong technical penetration testing ...

brands, experiencing the variety of our business and the services we deliver. We are currently recruiting for a Digital Transformation Manager (PCI) | 6-Month Fixed-Term Contrac t.This is a Hybrid role, working with Compass Group brands and CH&CO stakeholders. Salary: £65,000 - £75,000 DOE + company … payment terminal replacement projects. Conduct site discovery and requirements gathering activities. Understand and document operational requirements using WITY principles. Ensure compliance with PCI DSS requirements and company standards. Manage suppliers, third-party installers and internal deployment teams. Oversee decommissioning and disposal of legacy equipment. Coordinate installation schedules ...

company's Governance, Risk & Compliance capability, including: Reviewing the current compliance landscape and identifying gaps Building a practical compliance framework across the business Leading PCI DSS compliance initiatives Developing and improving GDPR processes and documentation Supporting security standards such as ISO 27001, SOC 2 and/or Cyber … today and creating a practical roadmap to get everything where it needs to be. Ideally you'll have experience with: Governance, Risk & Compliance (GRC) PCI DSS GDPR ISO 27001, SOC 2 and/or Cyber Essentials Security governance and audit preparation Policy creation and documentation Risk management frameworks ...

teams, and DPOs to understand their security requirements and design solutions that meet European regulatory standards (GDPR, EU AI Act, DORA, NIS2, SOC 2, PCI-DSS, and national regulator expectations).Lead technical deep-dives on network architecture, EU data residency, data retention and Zero Data Retention (ZDR) policies … applies to foundation models.Experience navigating compliance frameworks relevant to European financial services and insurance (DORA, NIS2, SOC 2, PCI-DSS, and national regulators' guidance on AI/ML such as FCA/PRA, BaFin, ACPR, FINMA).A track record of leading complex, high-stakes engagements with CISOs, security ...

pricing, taxation, invoicing, reconciliation and revenue-recognition integrations. Support fraud prevention and chargeback mitigation with internal teams and external providers. Security and compliance Minimise PCI DSS scope through tokenisation and provider-managed payment services, and support relevant compliance assessments. Ensure payment flows meet applicable Strong Customer Authentication … Practical understanding of payment providers, payment orchestration, subscription lifecycles and the failure modes that contribute to revenue loss and involuntary churn. Working knowledge of PCI DSS, PSD2 Strong Customer Authentication, 3-D Secure and relevant data-protection obligations. Experience designing cloud-scale microservices and direct-to-consumer platforms. ...

Responsibilities are: Formulate, develop and implement IT Security strategy, policies, programs and procedures that are aligned to the MHR UK Lead and drive PCI‐DSS Compliance program together with identified business stakeholders Keep up to date on new and emerging security technologies and their relevance Track and document … controls and measures for effective threats mitigation Perform periodic IT Security audits across UK properties to ensure compliance to established IT Security policies, PCI‐DSS and regulatory requirements We offer a benefits package including Social Events, Wellbeing and Team Activities Training and development Pension Salary Sacrifice Scheme Career ...

driving adoption of new platforms or ways of working across multiple teams. Experience working in regulated environments or with strict compliance requirements (e.g., GDPR, PCI‐DSS, SOC 2, DMA, and EU AI Act). Demonstrated ability to establish programme governance and operating models from scratch in ambiguous … Skills Excellent Communication Leadership Skills Decision‐Making Influencing Stakeholders Navigating Complexity Certifications & Qualifications PMP Agile Project Management Certification AWS Cloud Practitioner Industry Keywords GDPR PCI‐DSS SOC 2 DMA EU AI Act Tools & Technologies Jira Confluence Smartsheet Cloud‐Native Designs Microservices #J-18808-Ljbffr ...

senior escalation point for complex incidents and service issues. Maintain operational procedures, technical documentation, and support models. Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Lead the delivery of payment-related projects and strategic initiatives. Coordinate internal stakeholders, suppliers, and business teams to deliver successful … business requirements into technical solutions. Experience managing mobile applications and customer-facing digital platforms. Strong incident management and problem‐solving capabilities. Experience operating within PCI DSS‐regulated environments. Desirable Experience P2PE implementation experience. Knowledge of loyalty platforms and customer engagement technologies. Experience in large‐scale retail, hospitality, fuel ...

technical driver in the cyber security roadmap SOC Relationship: Design playbooks and tune detection with Arctic Wolf's Concierge Team Compliance: PCI-DSS audit cycle running smoothly; IR and DR plans tested and current The ideal candidate will have strong experience of Infrastructure and Network connectivity, along with … experience in a Microsoft environment including 365, Entra ID and SharePoint. They will understand IT compliance audit processes such as PCI-DSS, as well as some hands-on cyber security experience. The role will offer plenty of autonomy and ownership over the cyber security roadmap and so would ...

ensure seamless operations and cost-effective solutions.Compliance and Risk Management: Collaborate with Risk and Compliance teams to ensure adherence to industry regulations (e.g., PSD2, PCI-DSS) while balancing operational efficiency and merchant satisfaction.Cost Optimization: Lead initiatives to reduce operational costs, optimize fee structures, and streamline reconciliation processes, driving … processing, settlement, and reconciliation, with the ability to balance merchant needs and business objectives.Experience navigating and ensuring compliance with relevant regulations (e.g., FCA, PSD2, PCI-DSS) in a payments environment.Strong negotiation skills with experience managing relationships with card schemes, acquirers, payment processors, and financial partners.A data-driven mindset ...

repeatable deployments across all locations.Develop and maintain network build standards, configuration templates, and technical runbooksEnsure all designs meet FinTech regulatory and security requirements (e.g., PCI-DSS, SOC2)Own the reference architecture and standard design patterns used for new office deployments and office expansions.Operations, Monitoring & User ExperienceProvide escalation support … segmentation, 802.1XFamiliarity with MPLS, VPLS, and internet circuit procurementExperience working with third-party vendors and ISPs across multiple geographiesComfortable working in a regulated environment (PCI-DSS, SOC2 awareness is a plus)DesirableCCNP/CCIE (Routing & Switching)Fortinet NSE 4-7 (Network Security)Exposure to network automation tooling (Ansible ...

across all locations. Develop and maintain network build standards, configuration templates, and technical runbooks. Ensure all designs meet FinTech regulatory and security requirements (e.g., PCI‐DSS, SOC2). Own the reference architecture and standard design patterns used for new office deployments and office expansions. Operations, Monitoring & User Experience … with MPLS, VPLS, and internet circuit procurement. Experience working with third‐party vendors and ISPs across multiple geographies. Comfortable working in a regulated environment (PCI‐DSS, SOC2 awareness is a plus). Desirable CCNP/CCIE (Routing & Switching). Fortinet NSE 4‐7 (Network Security). Exposure ...

risks and benefits of competing security design options Ability to work on multiple challenging projects simultaneously Awareness of security standards including ISO 27000 series, PCI DSS, COBIT, NIST, and OWASP Security Management certification such as CISSP, CISM, CCSP, or equivalent would be useful Technical Security certification such … Network Architecture Deconstruction Threat Identification Risk Assessment Security Design Articulation Soft Skills Technical Communication Collaboration Certifications & Qualifications CISSP CISM CCSP CEH OSCP Industry Keywords PCI DSS COBIT NIST OWASP Tools & Technologies Public Cloud Environments Private Cloud Environments #J-18808-Ljbffr ...