1 to 25 of 184 PCI DSS Jobs in the UK

activities, and act as a trusted point of contact for internal teams and external assessors.You will work across Checkout's core compliance frameworks including PCI DSS v4.0.1, ISO 27001, SOC 2, and emerging regulatory obligations such as DORA and the EU AI Act, supporting our global footprint across … regulated markets worldwide.How You'll Make an ImpactGovernance, Risk and Compliance Programme ManagementOwn and manage defined workstreams within Checkout's GRC programme, including PCI DSS v4.0.1, ISO 27001, SOC 2, and relevant regulatory obligations across our global licensed entities.Coordinate control evidence collection activities across internal teams, ensuring continuous ...

running of Planet's database estate across Microsoft SQL Server, Oracle and MySQL, spanning on-premise, Azure and AWS platforms within a large PCI DSS scope. This is a hands-on delivery and service management role rather than a line-management one: the database engineering capacity sits with … when a database problem needs an owner. Alongside the run, you will drive a live cost-optimisation agenda and carry the database evidence for PCI DSS and internal audit. The role reports to the Senior Director - DWP & Infrastructure Services.What you will do:Database service delivery ...

security governance, operations, compliance, and risk management across a complex technology estate spanning payments, healthcare, and B2B SaaS.With ongoing M&A activity, active PCI-DSS obligations, and a rapidly evolving platform landscape, you'll play a critical role in protecting our customers, supporting business growth, and embedding security … Oversee security operations, including threat detection, incident response, and remediation Act as the executive lead during security incidents and manage external stakeholder communications Own PCI-DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group's Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials ...

security governance, operations, compliance, and risk management across a complex technology estate spanning payments, healthcare, and B2B SaaS. With ongoing M&A activity, active PCI-DSS obligations, and a rapidly evolving platform landscape, you'll play a critical role in protecting our customers, supporting business growth, and embedding … Oversee security operations, including threat detection, incident response, and remediation Act as the executive lead during security incidents and manage external stakeholder communications Own PCI-DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group's Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials ...

protect the confidentiality, integrity, and availability of our information assets, intellectual property, and customer data, ensuring strict compliance with regulatory frameworks including FCA, DORA, PCI DSS, and Edenred group security requirements. Key Responsibilities: Lead the PayTech Information Security function with alignment to Edenred's wider cyber risk management … Crime and Anti-Fraud teams to mitigate cyber risks related to financial crime. Manage third-party security risk due diligence programs. Lead and maintain PCI DSS and PCI PIN compliance and engagement with Qualified Security Assessors (QSAs). Drive cyber awareness programs and phishing simulations to embed ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership * Own the end-to-end payment card … senior escalation point for complex incidents and service issues. * Maintain operational procedures, technical documentation, and support models. * Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management * Lead the delivery of payment-related projects and strategic initiatives. * Coordinate internal stakeholders, suppliers ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership * Own the end-to-end payment card … senior escalation point for complex incidents and service issues. * Maintain operational procedures, technical documentation, and support models. * Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management * Lead the delivery of payment-related projects and strategic initiatives. * Coordinate internal stakeholders, suppliers ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership * Own the end-to-end payment card … senior escalation point for complex incidents and service issues. * Maintain operational procedures, technical documentation, and support models. * Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management * Lead the delivery of payment-related projects and strategic initiatives. * Coordinate internal stakeholders, suppliers ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial AwarenessKey ResponsibilitiesPayment Platform Ownership• Own the end-to-end payment card processing environment … senior escalation point for complex incidents and service issues.• Maintain operational procedures, technical documentation, and support models.• Ensure compliance with industry standards, including PCI DSS and P2PE requirements.Team LeadershipProject and Change Management• Lead the delivery of payment-related projects and strategic initiatives.• Coordinate internal stakeholders, suppliers, and business ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial AwarenessKey ResponsibilitiesPayment Platform Ownership• Own the end-to-end payment card processing environment … senior escalation point for complex incidents and service issues.• Maintain operational procedures, technical documentation, and support models.• Ensure compliance with industry standards, including PCI DSS and P2PE requirements.Team LeadershipProject and Change Management• Lead the delivery of payment-related projects and strategic initiatives.• Coordinate internal stakeholders, suppliers, and business ...

management including PIN keys, DUKPT, master/session key hierarchies, and TR-31 or TR-34 key exchange. Experience with key lifecycle management, PCI PIN and PCI-DSS scope experience is required.Application security at scale. SAST/DAST/SCA toolchain design and rollout. Threat modelling … publish runbooks, standards, ADRs, and reporting dashboards. If it isn't documented, it didn't happen.Comfort with a small team carrying real regulatory scope. PCI-DSS, PCI PIN, DORA and GDPR are constraints on the work, not optional context.Nice to have:Open source contributions or side projects ...

security scales without frictionDefining and enforcing cloud security architecture standards, guardrails, and policy-as-code inline with industry best practices including NIST, CIS, and PCI DSS.Use Wiz or equivalent CNAPP/CSPM to continuously assess, prioritise, and drive remediation of misconfigurations and vulnerabilities against CIS, NIST, and PCI … DSS benchmarks.Security MonitoringFine tune, and maintain modern SIEM platform (e.g. Sentinel) including KQL detection rules, workbooks, logging pipelines, and AI-assisted alert triage.Map detection coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps across the cloud estate.Maintain alignment to PCI DSS, SOC2, ISO27001 ...

compliance evaluation programs across the organization and isolates potential risks or liabilities and develops mitigation plans. Partners with external auditors to coordinate and facilitate PCI-DSS, ISO 27001, etc. compliance/audit efforts. This position typically works under limited supervision and direction. Candidates for this position will regularly … continuous compliance with security policies and standardsManage security review processes for all solutions to ensure they their design and implementation meets compliance requirements – including PCI-DSS, ISO 27001, SOC 1 & SOC 2 and other regional requirements Document and actively communicate any areas where the solutions and processes ...

built and deployed. You'll be doing both.This is a meaningful, high-visibility role: by maintaining and evolving business-critical services in scope of PCI-DSS, you will have a direct impact on the success of Trust Payments and will grow your wide-ranging expertise across both established … cloud-native technologies.Maintain and enhance an internal Platform that supports the development and deployment of business-critical services.Maintain full compliance with relevant standards (including PCI DSS Level 1 and GDPR).What We Expect of You, Day To Day:Contribute to architectural design and discovery work.Identify issues and enhancements ...

alignment and be a key technical driver in the cyber security roadmapSOC Relationship: Design playbooks and tune detection with Arctic Wolf’s Concierge TeamCompliance: PCI-DSS audit cycle running smoothly; IR and DR plans tested and currentThe ideal candidate will have strong experience of Infrastructure and Network connectivity … along with experience in a Microsoft environment including 365, Entra ID and SharePoint. They will understand IT compliance audit processes such as PCI-DSS, as well as some hands-on cyber security experience. The role will offer plenty of autonomy and ownership over the cyber security roadmap ...

Azure Landing Zone security and connectivity, collaborating with Network Engineering to validate secure firewall and VPN configurations.Compliance & Risk: Support audit readiness for ISO 27001, PCI DSS, and Cyber Essentials Plus, ensuring all remediation progress is tracked and documented.Essential Skills & Experience:Experience: 5–10 years in cloud or infrastructure … with EDR (MDE), CSPM tools, and vulnerability management platforms.Security Principles: Practical understanding of Zero Trust architecture and secure-by-design methodologies.Compliance Knowledge: Familiarity with PCI DSS, NIST, and ISO 27001 frameworks.Desirable Skills:Awareness of AWS security fundamentals (Guard Duty, KMS, IAM Identity Center).Experience with Infrastructure as Code ...

wider Security function by participating in the on-call rota (once established in the role) and supporting compliance and certification activities, including GDPR, PCI DSS and ISO 27001.We'd love to hear from you if you have... Hands-on experience with Splunk, including developing and tuning detection rules … collaborate effectively across teams and explain technical concepts clearly to both technical and non-technical stakeholders. Experience supporting compliance frameworks such as GDPR, PCI DSS or ISO 27001 would be helpful but isn't essential.More information:Enjoy fantastic perks like private healthcare & dental insurance, a generous work from ...

brands, experiencing the variety of our business and the services we deliver. We are currently recruiting for a Digital Transformation Manager (PCI) | 6-Month Fixed-Term Contrac t.This is a Hybrid role, working with Compass Group brands and CH&CO stakeholders. Salary: £65,000 - £75,000 DOE + company … payment terminal replacement projects. Conduct site discovery and requirements gathering activities. Understand and document operational requirements using WITY principles. Ensure compliance with PCI DSS requirements and company standards. Manage suppliers, third-party installers and internal deployment teams. Oversee decommissioning and disposal of legacy equipment. Coordinate installation schedules ...

teams, and DPOs to understand their security requirements and design solutions that meet European regulatory standards (GDPR, EU AI Act, DORA, NIS2, SOC 2, PCI-DSS, and national regulator expectations).Lead technical deep-dives on network architecture, EU data residency, data retention and Zero Data Retention (ZDR) policies … applies to foundation models.Experience navigating compliance frameworks relevant to European financial services and insurance (DORA, NIS2, SOC 2, PCI-DSS, and national regulators' guidance on AI/ML such as FCA/PRA, BaFin, ACPR, FINMA).A track record of leading complex, high-stakes engagements with CISOs, security ...

ensure seamless operations and cost-effective solutions.Compliance and Risk Management: Collaborate with Risk and Compliance teams to ensure adherence to industry regulations (e.g., PSD2, PCI-DSS) while balancing operational efficiency and merchant satisfaction.Cost Optimization: Lead initiatives to reduce operational costs, optimize fee structures, and streamline reconciliation processes, driving … processing, settlement, and reconciliation, with the ability to balance merchant needs and business objectives.Experience navigating and ensuring compliance with relevant regulations (e.g., FCA, PSD2, PCI-DSS) in a payments environment.Strong negotiation skills with experience managing relationships with card schemes, acquirers, payment processors, and financial partners.A data-driven mindset ...

repeatable deployments across all locations.Develop and maintain network build standards, configuration templates, and technical runbooksEnsure all designs meet FinTech regulatory and security requirements (e.g., PCI-DSS, SOC2)Own the reference architecture and standard design patterns used for new office deployments and office expansions.Operations, Monitoring & User ExperienceProvide escalation support … segmentation, 802.1XFamiliarity with MPLS, VPLS, and internet circuit procurementExperience working with third-party vendors and ISPs across multiple geographiesComfortable working in a regulated environment (PCI-DSS, SOC2 awareness is a plus)DesirableCCNP/CCIE (Routing & Switching)Fortinet NSE 4-7 (Network Security)Exposure to network automation tooling (Ansible ...

bespoke enterprise/government security questionnaires.Compliance Knowledge: Working knowledge of Cyber Essentials Plus, ISO 27001, SOC 2 Type II, and at least one of PCI DSS, GDPR/UK GDPR, HIPAA, or FedRAMP.Technical Expertise: Strong technical understanding of security principles, architecture, and vulnerability management, including access control, encryption ...

Threat intelligence: experience consuming TI feeds (MISP, OpenCTI, commercial TI platforms) to contextualise vulnerabilities. • Familiarity with compliance frameworks: ISO 27001, NIST CSF, CIS Controls, PCI DSS, SOC 2 – as they relate to vulnerability management. SOFT SKILLS & COMPETENCIES • Strong risk communication skills – translates technical vulnerability data into business risk ...

fast-paced, dynamic environment, Organisation skills and forward planning. Possess strong hands-on experience and working knowledge of: Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as NCSC Cyber Assurance Framework, ISO 27001, NIST CSF and CIS. HMG and NCSC security policies ...

Threat intelligence: experience consuming TI feeds (MISP, OpenCTI, commercial TI platforms) to contextualise vulnerabilities. Familiarity with compliance frameworks: ISO 27001, NIST CSF, CIS Controls, PCI DSS, SOC 2 – as they relate to vulnerability management. PREFERRED CERTIFICATIONS Qualys Certified Specialist – VMDR/TruRisk Tenable Certified Security Engineer (TCSE) Certified ...