26 to 50 of 271 PCI DSS Jobs in the UK

assessments and gap analyses, translating results into actionable remediation plans Support alignment and readiness activities for ISO 27001 and other relevant frameworks (e.g., PCI DSS, GLBA, state/federal financial regulations as applicable) Maintain a unified control framework that maps overlapping requirements across multiple standards to reduce duplicate … audits (as a practitioner preparing evidence, not just an auditor) Working knowledge of NIST CSF and ISO 27001 (or similar frameworks like PCI DSS, HITRUST) Experience with a GRC automation platform (Anecdotes, Vanta, Drata, Secureframe, OneTrust, ServiceNow GRC, or similar) Comfort working with API integrations to ingest data ...

review and assurance activities across existing suppliers.* Provide IT and business advice on aspects of security standards and regulations such as ISO27001, NIST CSF, PCI DSS, NISD and NIS2.* Engage with I&T system owners to provide training in relation to information security, cyber resilience, phishing, and facilitation … manufacturing environments in manufacturing or similar industries.* Experience working with information security standards and frameworks such as and regulations such as ISO27001, NIST CSF, PCI DSS, NISD and NIS2.* Proven analytical, problem-solving, planning, project delivery and supplier work packages management skills.* Demonstrable experience of engaging across ...

review and assurance activities across existing suppliers. Provide IT and business advice on aspects of security standards and regulations such as ISO27001, NIST CSF, PCI DSS, NISD and NIS2. Engage with I&T system owners to provide training in relation to information security, cyber resilience, phishing, and facilitation … manufacturing environments in manufacturing or similar industries. Experience working with information security standards and frameworks such as and regulations such as ISO27001, NIST CSF, PCI DSS, NISD and NIS2. Proven analytical, problem-solving, planning, project delivery and supplier work packages management skills. Demonstrable experience of engaging across ...

retail operations.Coordinate testing, rollout, and rollback plans in collaboration with store operations and infrastructure teams.Ensure changes are properly assessed for security, performance, and PCI impact.Ensure POS applications operate in line with PCI DSS requirements and internal security standards.Support audits and assessments by providing evidence and operational assurance.Work … tasks.Track record of delivering complex, high value technology initiatives in a retail environment utilising multiple delivery methodologiesExperience supporting business-critical, revenue-generating systems.Familiarity with PCI DSS requirements and payment system controls.Experience supporting POS rollouts, upgrades, or transformation programmes.A problem solver. You can identify and manage issues and risks ...

security investigations and overseeing remediation after incidents or identified risks Driving compliance with security policies, standards and regulations, including ISO 27001, Cyber Essentials and PCI-DSS Managing security audits, risk assessments and improvement plans Delivering security reporting, metrics and risk updates to senior stakeholders and governance forums Working … response, risk management and security governance Experience developing and implementing security policies, controls and improvement programmes A strong understanding of ISO:27001, Cyber Essentials, PCI-DSS and wider security best practice Excellent stakeholder management and communication skills, and the ability to influence at all levels Experience leading teams ...

Analyst strengthens PCI Pal's central Information Security function by providing structured governance, risk and compliance analysis across audit, assurance, control management and strategic change. The role turns requirements, evidence, risks and delivery updates into accurate, traceable information that supports timely decisions by the GRC Lead and CISO. … requirements Relevant experience in GRC, information security compliance, risk management, internal audit or assurance. Working knowledge of at least one major framework, such as PCI DSS, ISO/IEC 27001, SOC 2 or NIST CSF, with the ability to apply requirements in practice. Experience reviewing policies, audit reports ...

Development Lifecycle (SDLC) processes and solutions, compliance and consultancy activities. These activities will need to comply with standards such as ISO27002, Cyber Essential Plus, PCI-DSS, DPA:2018. EU Directives and PASF as well as customer specific requirements while also aligning with ISO22301 and resiliency requirements. … equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK Previous experience and knowledge of security frameworks i.e. ISO27001, NIST, CIS Controls and PCI-DSS compliance An understanding of HMG security standards (e.g. Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.). Experience of Enterprise Project ...

Development Lifecycle (SDLC) processes and solutions, compliance and consultancy activities. These activities will need to comply with standards such as ISO27002, Cyber Essential Plus, PCI-DSS, DPA:2018. EU Directives and PASF as well as customer specific requirements while also aligning with ISO22301 and resiliency requirements. … equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK Previous experience and knowledge of security frameworks i.e. ISO27001, NIST, CIS Controls and PCI-DSS compliance An understanding of HMG security standards (e.g. Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.). Experience of Enterprise Project ...

Development Lifecycle (SDLC) processes and solutions, compliance and consultancy activities. These activities will need to comply with standards such as ISO27002, Cyber Essential Plus, PCI-DSS, DPA:2018. EU Directives and PASF as well as customer specific requirements while also aligning with ISO22301 and resiliency requirements. … equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK Previous experience and knowledge of security frameworks i.e. ISO27001, NIST, CIS Controls and PCI-DSS compliance An understanding of HMG security standards (e.g. Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.). Experience of Enterprise Project ...

operations. Coordinate testing, rollout, and rollback plans in collaboration with store operations and infrastructure teams. Ensure changes are properly assessed for security, performance, and PCI impact. Ensure POS applications operate in line with PCI DSS requirements and internal security standards. Support audits and assessments by providing evidence … delivering complex, high value technology initiatives in a retail environment utilising multiple delivery methodologies Experience supporting business-critical, revenue-generating systems. Familiarity with PCI DSS requirements and payment system controls. Experience supporting POS rollouts, upgrades, or transformation programmes. A problem solver. You can identify and manage issues ...

governance. Key responsibilities include: Managing and enhancing cyber security governance and compliance frameworks. Owning and developing the organisation's GRC platform. Leading PCI DSS compliance activities and supporting audit requirements. Managing supplier security assurance and third-party risk assessments. Advising projects and stakeholders on cyber security and compliance … requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology initiatives. We're keen to speak with cyber security, risk, governance and compliance ...

technical levels, supporting board-level decision‐making while driving operational security improvements aligned to recognised standards such as NIST CSF, ISO 27001, DORA, PCI‐DSS, and MITRE ATT&CK. Reporting To: Director/Head of Cyber Security Location: London (Hybrid) Employment Type: Full‐Time Salary … OWASP Top 10). Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with ISO 27001. Ensure alignment with GDPR, PCI‐DSS, DORA, NIST CSF, COBIT, SANS, and related frameworks. Develop security policies, SOPs, and governance documentation. Conduct IT resilience and cloud security audits. ...

effectiveness of information security controls and identify opportunities for improvement. Apply recognised security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, PCI-DSS, and other relevant best practices in a proportionate and risk-based manner. Liaise with Cyber Security, IT, Business Continuity, Data Protection, Risk, Compliance … risk assessments, control reviews, audits, or assurance activities. Technical knowledge of information security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, DORA, PCI-DSS, and related security practices. Strong communicator with positive influencing and interpersonal skills. Ability to synthesise complex technical and business information and present ...

where some products are today outside the standard tooling. Governance, risk and compliance and vendor management Own ISO 27001, SOC 1, SOC 2 and PCI DSS compliance, the audit calendar, the compliance automation platform and the relationship with our auditors. Work with legal and the Data Protection Officer … facing those customers on security matters. Working knowledge of ISO 27001 and SOC 2, and experience of being accountable for audits and certifications. PCI DSS experience is an advantage. Practical understanding of cloud security on AWS and Azure, Kubernetes-based platforms, infrastructure as code and modern CI/ ...

network capacity and performance, manage resource utilisation efficiently, and conduct thorough cost analytics to identify optimisation opportunities.**What you will be doing:*** Ensure PCI DSS compliance and implement best practices such as the latest encryption, access control, documentation and patching to maintain the highest level of security.* Collaborate … using AWS tools and services.* Certifications in relevant technologies: Possession of industry certifications to validate expertise.* Experience with compliance and security standards: Familiarity with PCI DSS and other relevant security frameworks to ensure the infrastructure meets regulatory requirements and best practices.* Strong problem-solving collaboration and incident management ...

Door and WAF Owning Entra ID, Conditional Access, PIM and RBAC, including joiner, mover and leaver automation with HR Leading the technical side of PCI DSS v4.0 compliance and NIST alignment, from controls and evidence through to audits Building automation with Logic Apps, Function Apps and PowerShell Securing … colleagues What you'll bring 5+ years' hands-on experience with Azure in production Strong Azure networking and Entra ID skills Experience working to PCI DSS, NIST, ISO 27001 or Cyber Essentials Plus Confident PowerShell scripting The ability to explain technical risk in plain English It would ...

embed security across the product lifecycle. Key responsibilities Own and evolve the information security strategy. Lead ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance. Embed secure-by-design and DevSecOps across engineering. Drive security improvements through AI, automation and technical controls. Lead security risk, threat modelling … improve detection and response. Support client assurance and security audits. Experience required CISSP, CISM or equivalent. Strong knowledge of ISO 27001, NIST, CIS, PCI DSS and GDPR. Proven leadership across information security, cyber risk or assurance. Strong technical understanding of cloud, application, network, endpoint and data security. Experience ...

using Databricks, Snowflake, ETL pipelines, and Big Data tools. Champion Data Governance practices including classification, cataloging, and lineage. Ensure compliance with ISO 27001, GDPR, PCI DSS, and other security standards. Embed DevSecOps principles into CI/CD pipelines and platform delivery. Produce High‐Level and Low‐Level Designs … teams for seamless integration. Support business development initiatives, contributing to bids and proposals. Business Analysis experience and stakeholder engagement skills. Security - ISO 27001, GDPR, PCI DSS, IDAM, DevSecOps Agile - SAFe, DevOps, Scrum Collaboration - Stakeholder Engagement, Governance, Team Mentoring Business - Business Analysis, Bid Support, Multi‐sector Delivery Upon employment ...

capability and lead the response to incidents and suspected data breaches. Lead the business to Cyber Essentials Plus and towards ISO 27001 readiness, maintaining PCI DSS and supporting UK GDPR compliance. Write and own our security, acceptable use and AI usage policies, and run security‐awareness training across … incident response, including real incidents. Evidence of building with AI and automation, with comfort in scripting (Python, TypeScript, shell) and APIs. Working knowledge of PCI DSS and UK GDPR. Strong communication skills and the confidence to challenge decisions where there is genuine risk. Desirable Experience in ecommerce ...

with operating in a regulated environment. We are a regulated financial institution, and you would be supporting our compliance capabilities to maintain alignment with PCI-DSS, ISO27001, DORA, and many more. A developer and engineering mindset. A practical understanding of how software is built in a professional environment … reshape how a scaling engineering organisation builds software securely. Direct exposure to banking-licence-scale security work in a regulated payments environment, with PCI DSS, DORA, and GDPR as live constraints on the work. Room to grow: Building and growing your own capability is mutually beneficial ...

systems into payment gateways. Android Experience: Familiarity with Android development, specifically in the context of building or maintaining applications for smart payment terminals. PCI-DSS & Compliance: Deep understanding of payment scheme rules, PCI-DSS compliance, EMV standards, or Point-to-Point Encryption (P2PE). Infrastructure ownership ...

lasting improvements. Develop resilience and disaster recovery plans. Implement secrets management, network protection and identity and access controls. Support the technical controls required for PCI-DSS compliance and FCA requirements. Automate routine operations and reduce manual intervention. Create reusable tooling and self-service capabilities that help developers deliver … operating cloud infrastructure as a Platform Engineer or SRE. Desirable experience Building platforms for fintech, banking or payments businesses. Supporting compliance frameworks such as PCI-DSS, SOC 2 or ISO 27001. Establishing monitoring and on-call processes from scratch. Operating multi-tenant SaaS platforms. The package Generous annual ...

more effective, scalable and industry-leading third party security capability as Monzo grows! Delivering security assurance activities: lead and contribute to control testing, PCI DSS assessments, regulatory reviews, and internal and external audits. Evaluate evidence, identify gaps and work with teams across Monzo to see findings and remediation … your knowledge and skills. It would be great if... You’ve worked in financial services, fintech, or another highly regulated environment. You’ve supported PCI DSS, ISO 27001, SOC 2 or NIST-aligned assurance, regulatory reviews, or internal and external audits. Not ticking every box? That’s totally ...

more effective, scalable and industry-leading third party security capability as Monzo grows! Delivering security assurance activities: lead and contribute to control testing, PCI DSS assessments, regulatory reviews, and internal and external audits. Evaluate evidence, identify gaps and work with teams across Monzo to see findings and remediation … your knowledge and skills. It would be great if... You’ve worked in financial services, fintech, or another highly regulated environment. You’ve supported PCI DSS, ISO 27001, SOC 2 or NIST-aligned assurance, regulatory reviews, or internal and external audits. Not ticking every box? That’s totally ...

Responsibilities are: Formulate, develop and implement IT Security strategy, policies, programs and procedures that are aligned to the MHR UK Lead and drive PCI‐DSS Compliance program together with identified business stakeholders Keep up to date on new and emerging security technologies and their relevance Track and document … controls and measures for effective threats mitigation Perform periodic IT Security audits across UK properties to ensure compliance to established IT Security policies, PCI‐DSS and regulatory requirements We offer a benefits package including Social Events, Wellbeing and Team Activities Training and development Pension Salary Sacrifice Scheme Career ...