1 to 25 of 87 PCI DSS Jobs in the UK

security governance, operations, compliance, and risk management across a complex technology estate spanning payments, healthcare, and B2B SaaS. With ongoing M&A activity, active PCI-DSS obligations, and a rapidly evolving platform landscape, you’ll play a critical role in protecting our customers, supporting business growth, and embedding … Oversee security operations, including threat detection, incident response, and remediation Act as the executive lead during security incidents and manage external stakeholder communications Own PCI-DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group’s Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials ...

coordinating requirements with Infrastructure, IHDB, and other stakeholders. Partner with HR and the Group CDTO to attract, assess, and onboard technology talent globally. Own PCI-DSS operational compliance across relevant systems and locations, including annual assessments, QSA relationships, remediation programmes, and ongoing controls governance. Own the full technology … embedded vendor roadmaps, and ensure effective licensing and cost control. Ensure all systems comply with internal policies, including cybersecurity, GDPR, SOC monitoring, incident response, PCI-DSS, and ISO 27001 across all global locations. Own and manage the IT budget, including software licensing, MSP costs, project spend, and team ...

protect the confidentiality, integrity, and availability of our information assets, intellectual property, and customer data, ensuring strict compliance with regulatory frameworks including FCA, DORA, PCI DSS, and Edenred group security requirements.**Key Responsibilities:*** Lead the PayTech Information Security function with alignment to Edenred’s wider cyber risk management … Crime and Anti-Fraud teams to mitigate cyber risks related to financial crime.* Manage third-party security risk due diligence programs.* Lead and maintain PCI DSS and PCI PIN compliance and engagement with Qualified Security Assessors (QSAs).* Drive cyber awareness programs and phishing simulations to embed ...

protect the confidentiality, integrity, and availability of our information assets, intellectual property, and customer data, ensuring strict compliance with regulatory frameworks including FCA, DORA, PCI DSS, and Edenred group security requirements.**Key Responsibilities:*** Lead the PayTech Information Security function with alignment to Edenred’s wider cyber risk management … Crime and Anti-Fraud teams to mitigate cyber risks related to financial crime.* Manage third-party security risk due diligence programs.* Lead and maintain PCI DSS and PCI PIN compliance and engagement with Qualified Security Assessors (QSAs).* Drive cyber awareness programs and phishing simulations to embed ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership * Own the end-to-end payment card … senior escalation point for complex incidents and service issues. * Maintain operational procedures, technical documentation, and support models. * Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management * Lead the delivery of payment-related projects and strategic initiatives. * Coordinate internal stakeholders, suppliers ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership Own the end-to-end payment card … senior escalation point for complex incidents and service issues. Maintain operational procedures, technical documentation, and support models. Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management Lead the delivery of payment-related projects and strategic initiatives. Coordinate internal stakeholders, suppliers ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership* Own the end-to-end payment card … senior escalation point for complex incidents and service issues.* Maintain operational procedures, technical documentation, and support models.* Ensure compliance with industry standards, including PCI DSS and P2PE requirements.Team LeadershipProject and Change Management* Lead the delivery of payment-related projects and strategic initiatives.* Coordinate internal stakeholders, suppliers, and business ...

Senior Information Security Analyst/Engineer/Architect to £54k + Benefits ISO27001, COBIT, SECURITY, ITIL, CISM, CISSP, PCI-DSS Lead Information Security Engineer/Analyst: Do you have a background working in an IT Security function and are able to identify and remediate threats or vulnerabilities, implement … assets and mitigate against potential risks.You will be actively responsible for ensuring the successful achievement of external certifications such as ISO27001, MOU, PSN and PCI-DSS etc alongside managing security incident response plans. In addition, the Lead information Security Analyst/Engineer will provide advice and guidance ...

afterthought applied on top. Advise the CISO on technical security strategy, emerging technology risks, and the security implications of architectural decisions. Support PCI DSS compliance from an architectural perspective, ensuring the platform design supports scope minimisation, network segmentation, and the technical requirements of PCI DSS 4.0. … . Understanding of cryptographic principles and their practical application in payment systems: tokenisation, format‐preserving encryption, HSM/KMS key management, TLS configuration, and PCI P2PE concepts. Experience leading technical teams, mentoring engineers, and building team capability in a growing organisation. Ability to communicate architectural decisions and trade‐offs ...

afterthought applied on top. Advise the CISO on technical security strategy, emerging technology risks, and the security implications of architectural decisions. Support PCI DSS compliance from an architectural perspective, ensuring the platform design supports scope minimisation, network segmentation, and the technical requirements of PCI DSS 4.0. … . Understanding of cryptographic principles and their practical application in payment systems: tokenisation, format‐preserving encryption, HSM/KMS key management, TLS configuration, and PCI P2PE concepts. Experience leading technical teams, mentoring engineers, and building team capability in a growing organisation. Ability to communicate architectural decisions and trade‐offs ...

lead all aspects of external audits and certifications supporting lottery customers, including but not limited to SOC 1, SOC 2, ISO 27001, WLA-SCS, PCI-DSS, and jurisdiction-specific requirements. Maintain audit readiness throughout all iLottery regions by conducting proactive control evaluations, identifying gaps, monitoring remediation progress … audit methodologies, internal controls, risk management, and governance frameworks. Experience with recognized industry benchmarks and certifications such as SOC 1, SOC 2, ISO 27001, PCI-DSS, WLA-SCS, NIST, COBIT, or comparable frameworks. Strong analytical, problem-solving, and decision-making capabilities. Excellent communication, presentation, and collaborator management skills. ...

lead all aspects of external audits and certifications supporting lottery customers, including but not limited to SOC 1, SOC 2, ISO 27001, WLA-SCS, PCI-DSS, and jurisdiction-specific requirements.* Maintain audit readiness throughout all iLottery regions by conducting proactive control evaluations, identifying gaps, monitoring remediation progress … audit methodologies, internal controls, risk management, and governance frameworks.* Experience with recognized industry benchmarks and certifications such as SOC 1, SOC 2, ISO 27001, PCI-DSS, WLA-SCS, NIST, COBIT, or comparable frameworks.* Strong analytical, problem-solving, and decision-making capabilities.* Excellent communication, presentation, and collaborator management skills. ...

Head of Information Security - CISSP, CISM, ISO27001, NIST, PCI DSS, GDPR, DevSecOps, Cloud Security, SIEM, SOC, AI Security. Permanent, West London, Hybrid Working. c.£100k +Benefits Head of Information Security/CISO/Senior InfoSec Consultant required to lead and develop a modern, security-first function within … governance framework. Define and develop robust security controls inline with both business practices and compliance requirements inc ISO27001, CE+, SOC2, NIST CSF, GDPR and PCI DSS. Embed Secure by Design and DevSecOps principles across engineering teams. Lead cyber risk management, incident response, threat modelling and vulnerability management using ...

product and delivery teams in Agile and DevOps environments to embed security by design. Support compliance with security and regulatory frameworks including ISO 27001, PCI DSS, OWASP and internal standards. Review security posture of vendors and outsourced services, providing due diligence and third-party risk assurance. Present security … cloud security, secure application delivery, third-party risk management and access management practices. Experience applying recognised frameworks and standards such as ISO 27001, PCI DSS, OWASP, NIST and enterprise security control frameworks. Ability to translate complex technical risks into business language and provide clear, evidence-based recommendations. Exposure ...

time Define security and compliance requirements and work closely with Engineering and IT teams to ensure they are implemented effectively Maintain existing compliance across PCI DSS, ISO27001, SOC2 and Cyber Essentials, and lead new compliance initiatives across additional standards such as ISO 27017 and ISO 27018 Manage audits … support a small team, creating focus, trust and shared direction About You_ You've worked in security and compliance within a payments, fintech or PCI-regulated environment You have strong, hands-on experience with PCI DSS, ISO27001 and SOC2, including preparing for and delivering audits ...

left” security testing, encouraging developers to adopt secure coding and testing practices from inception. Leads initiatives that incorporate frameworks such as ISO 27001, NIST, PCI-DSS, or OWASP into everyday engineering processes. Ensures compliance while driving continuous improvements to security posture. Data Analysis and Reporting Develops and presents … analytics, defect identification, understanding how AI can enhance quality processes. Provides expert security testing via MITRE ATT&CK, advanced vulnerability management, DevSecOps. Familiar with PCI-DSS, ISO 27001, NIST frameworks, large-scale compliance audits. Applies chaos engineering (Gremlin, Chaos Mesh) for failover or resilience. What is it like ...

linking threats, risks and controls) Deepening understanding of security controls and their practical application Gaining further exposure to security standards and regulatory frameworks (e.g. PCI DSS, data protection) Strengthening end-to-end security design capability (e.g. threat modelling, control coverage) Providing clearer examples of individual contribution and ownership … security decisions Any experience of these would be really useful Awareness of industry related security standards such as ISO 27000 series, PCI DSS, COBIT, NIST, OWASP. Certifications in Security Management such as CISSP/CISM/CCSP or equivalent. Certifications in technical Security domains such as CEH/ ...

executive role entails governance, operations, compliance, and risk management within a complex technology environment. The ideal candidate will have significant CISO experience, especially with PCI-DSS compliance, and possess strong leadership skills. Competitive salary, benefits, and a hybrid working model are offered. #J-18808-Ljbffr ...

implementation and monitoring of disaster recovery solutions and backup strategies. Ensure compliance with internal security policies and regulatory requirements (e.g., GDPR, ISO27001, PCI DSS v4.0). Provide support and root cause analysis for complex issues. Document system configurations, changes and operating procedures. Participate in infrastructure projects, including system ...

security clearance to be considered. Technical Knowledge Security frameworks including ISO 27001, NIST CSF, CIS and NCSC guidance Regulatory landscape including GDPR and PCI DSS Familiarity with HMG and NCSC standards Modern technology environments: Cloud platforms such as Azure, AWS and Google Cloud Microsoft 365 Infrastructure and network ...

security clearance to be considered. Technical Knowledge Security frameworks including ISO 27001, NIST CSF, CIS and NCSC guidance Regulatory landscape including GDPR and PCI DSS Familiarity with HMG and NCSC standards Modern technology environments: Cloud platforms such as Azure, AWS and Google Cloud Microsoft 365 Infrastructure and network ...

network patching, firmware upgrades, vulnerability remediation, and security hardening activities. Ensure compliance with industry standards and frameworks, including ISO 27001, NIST, CIS Benchmarks, and PCI-DSS. Partner with Cyber Security teams to identify risks, strengthen controls, and enhance enterprise security posture. Performance, Reliability & Automation Monitor, troubleshoot, and optimize enterprise ...

bonus if you have Experience within payments, financial technology, or highly regulated industries, including knowledge of Payment Card Industry Data Security Standard (PCI DSS) and global privacy frameworks. Success implementing passwordless authentication, policy-as-code authorization models, or advanced identity threat detection and response capabilities at scale. Relevant ...

Certifications such as CISSP, CISA, CRISC, or equivalent. Familiarity with additional frameworks (e.g., ISO 22301, ISO 31000, ISO 28000, ITIL, PASTA, OWASP Top 10, PCI-DSS, GDPR, DEFCON 660/659 etc..). We are a Disability Confident Employer Capgemini is proud to be a Disability Confident Employer ...

risks, and achieve or maintain compliance with recognised standards and frameworks including ISO/IEC 27001, Cyber Assessment Framework (CAF), Cyber Essentials, SOC-2, PCI, DSS, GDPR, and other relevant regulatory or contractual requirements. This is a customer-facing consultancy role, requiring confident engagement with senior stakeholders, clear … best practice frameworks Knowledge of additional frameworks such as CAF, NIS-2, NIST Cybersecurity Framework, CIS Controls, SOC 2, ISO 22301, ISO 27701 or PCI DSS. ExperienceusingGRC,auditmanagement,riskregisterorreporting tools. HoldSC/DVclearanceorwillingnesstoundertakesecurity vetting. MemberofCiSPoranotherrelevantprofessional community. Willingnesstostudyforandattainfurtherrelated qualifications. Experienceofimplementingandmanaging ISO 9001. As a GRC/Information Security Consultant ...