Birmingham, England, United Kingdom Hybrid / WFH Options
Experis UK
travel to client sites. You’ll be part of a team delivering security consultancy in a client-facing role, with a particular focus on: PCIDSS consultancy and assessments Security reviews against standards or guidelines such as the NCSC 10 Steps to Cyber Security and NIST CSF ISO … Creating or supporting third-party risk management and audit programmes Essential skills and experience: Be a current QSA who has completed multiple on-site PCIDSS assessments, and be able to demonstrate a mature understanding of complex PCIDSS environments, and an ability to consult as … structured and methodical manner, with support to manage your own time with a focus on quality work Your primary role will be to deliver PCIDSS consultancy and assessment activities to our clients as part of an established and experienced team of consultants. It’s not all PCIMore ❯
Loughton, Essex, South East, United Kingdom Hybrid / WFH Options
Profile 29
role. This role will focus on creating a business strategy, gap analysis and implementation, for securing their Azure-based infrastructure, integrating security automation, ensuring PCIDSS compliance, vulnerability and penetration testing and incident response. This role will focus on developing and maintaining secure, scalable Azure DevOps pipelines and … WAF) and Intrusion Prevention Systems (IPS). Vulnerability & Penetration Testing: Review Penetration Testing, vulnerability assessments, and security scanning to proactively identify and remediate risks. PCIDSS Compliance: Conduct security audits, risk assessments, and ensure regulatory compliance. DNS Security: Implement and monitor DNS security solutions to prevent cyber threats. … be found at: profile-29 .com/privacy) Profile 29 recruitment keywords: DevSecOps DevOps Azure cloud security Microsoft Defender Microsoft Sentinel WAF IPS DNS pcidsspcidsspci-dss soar loughton Debden essex London freelance contract More ❯
Employment Type: Contract, Work From Home
Rate: From £500 to £700 per day (direct contract with the client)
Ely, Cambridgeshire, East Anglia, United Kingdom Hybrid / WFH Options
IT Governance Limited, a GRC Solutions Company
Engagements: Work with clients of all merchant levels and service providers across various industries. Career Growth: Enhance your expertise with exposure to frameworks like PCIDSS, ISO27001, SWIFT CSF, and CIS18. Collaborative Culture: Join a team that values innovation, client success, and your professional development. Key Responsibilities: Conducting … comprehensive security assessments, including PCIDSS, ISO27001/27002, SWIFT Security, and Cloud compliance. Preparing executive and technical reports detailing findings, security gaps, and actionable recommendations. Leading PCIDSS Gap Assessments, Risk Assessments, and Reports on Compliance (ROCs) across various industries. Creating roadmaps for compliance, with … or exceeded. Supporting business development efforts by providing technical expertise during client discussions. Were looking for an experienced and proactive QSA Consultant with: Essential: PCI QSA certification, supported by one or more of the following: CISSP, CISA, CISM, or ISO27001 Lead Auditor + Lead Implementer certifications. Experience: Minimum More ❯
Guildford, Surrey, United Kingdom Hybrid / WFH Options
Sycurio
The Information Security Director develops, shapes, and maintains Sycurio's information security capability, driving the attainment and maintenance of the ISO27001, PCI-DSS, and SOC2 compliance. They are the subject matter expert on all things regarding security and compliance, owning the information risk management processes. They are the … parties and providing assurance of policies, procedures, and systems. Develop, maintain, and expand the information security management system ('ISMS') to optimise compliance for ISO27001, PCI-DSS, and SOC2. Identify gaps in the information security capability, both technical and operational, and propose remediation and mitigation plans and solutions. Responsible … CISSP, CISM, CISA, or equivalent. Experience: 10+ years of information security experience. Financial/Fintech services/payments desirable. Deep knowledge of security frameworks (PCI, ISO 27001, NIST) and regulations (GDPR, CCPA). Experience with PCIDSS compliance and implementation. Proven success in managing external auditors to More ❯
Qualified Security Assessor (QSA) - Growing Cybersecurity Team (Fully remote) If you know your PCIDSS from your ISO27001 and can spot a security gap from a mile away, this role is for you! We're on the lookout for a Qualified Security Assessor (QSA) to join a fast … growing team that helps businesses across all sectors stay secure and compliant. As a QSA, you will guide clients through their PCI compliance journey, conducting security assessments and providing expert advice on frameworks such as PCIDSS, ISO 27001, SWIFT CSF, and CIS18. You will work closely … with organisations at various stages of compliance, helping them identify risks, implement solutions, and achieve certification. What you'll be doing: Performing PCIDSS audits, risk assessments, and compliance reviews. Preparing clear and engaging reports Communicating with clients to explain compliance in a way that doesn't bore More ❯
security standards and monitor compliance. Manage security reviews during vendor onboarding and contract renewals. Governance, Risk, and Compliance Ensure compliance with relevant regulations (e.g., PCIDSS, GDPR, SOC 2, ISO 27001) and internal policies. Maintain up-to-date knowledge of emerging threats, regulatory changes, and best practices. Establish … response. Relevant certifications such as CISSP, CISM are highly desirable. Strong knowledge of security frameworks (e.g., NIST, CIS, ISO 27001) and compliance standards (e.g., PCI-DSS, PSD2, GDPR). Hands-on experience with security technologies (e.g., SIEM, endpoint protection, cloud security tools). Exceptional leadership and communication skills More ❯
Braintree, Essex, United Kingdom Hybrid / WFH Options
Sycurio
and technical specifications for development teams through Jira tickets. Conduct gap analysis between current and future-state payment architectures. Ensure compliance with regulatory requirements (PCI-DSS, etc.) in all payment processes. Functional Architecture & Payment Integration Define and document end-to-end payment transaction workflows, system integrations, and API … major PSPs (e.g., Stripe, Adyen, Worldpay, PayPal, Braintree, etc.). Solid understanding of RESTful APIs, SOAP, JSON, XML, and payment gateway protocols. Knowledge of PCI-DSS compliance, PSD2, 3D Secure (3DS), tokenization, and fraud prevention measures. Familiarity with cloud platforms (AWS) and microservices-based architectures. Proficiency in using More ❯
Liverpool, England, United Kingdom Hybrid / WFH Options
Handepay
a service critical environment are advantageous. As an Infrastructure Engineer they will be responsible for ensuring the Infrastructure Services meet all regulatory requirements, namely PCIDSS, ISO27001, and Cyber Security Essentials. This will include the introduction of standards to ensure conformity within the PayPoint environments. Be responsible for … Technologies (Ansible, Terraform, etc) Understanding of security in relation to network, server, applications, data and databases It would be great if you already have… PCI-DSS compliance Proficient in PowerShell Scripting, Bash Scripting or Python Windows Storage Spaces and Storage Spaces Direct HPE Hardware Design of Highly Available More ❯
an Application Security Engineer to strengthen our security posture by identifying vulnerabilities, integrating best practices into CI/CD pipelines , and ensuring compliance with PCIDSS, SOC 2, GDPR, and CCPA . You'll work closely with development teams to embed security into the Software Development Lifecycle (SDLC … Azure preferred) and securing cloud-native applications. Familiarity with CI/CD security integration . Understanding of compliance and regulatory frameworks (SOC 2, GDPR, PCIDSS). Preferred Skills Experience with container security and Kubernetes . Knowledge of infrastructure security and security monitoring. Familiarity with Jira for issue More ❯
Amherst, Massachusetts, United States Hybrid / WFH Options
University of Massachusetts Amherst
with 11 (eleven) years' relevant experience. Strong understanding of and experience with information security frameworks, privacy laws, and regulatory requirements (e.g., NIST, FERPA, HIPAA, PCI-DSS, ISO 27001). Extensive experience conducting risk assessments, compliance evaluations, and policy development. Deep understanding of security governance, risk management frameworks, and More ❯
Bradford, England, United Kingdom Hybrid / WFH Options
Morrisons
driving security policies and guide rails Experience working within a structured governance framework IT Security Qualification such as CISA/CISSP or BCS and PCI/ISA qualification Industry and Regulatory Experience The security architect is expected to have documented experience with the following: Regulations, Standards and Frameworks Payment … CardIndustryDataSecurityStandard (PCI-DSS) General Data Protection Regulation (GDPR) and Privacy Practices ISO 27001/2 Knowledge of OWASP 10 NIST Cybersecurity Framework (CSF) CIS and Benchmarking By joining Morrisons, you not only become an essential asset to our success but also open doors to More ❯
Bradford, south west england, united kingdom Hybrid / WFH Options
Morrisons
driving security policies and guide rails Experience working within a structured governance framework IT Security Qualification such as CISA/CISSP or BCS and PCI/ISA qualification Industry and Regulatory Experience The security architect is expected to have documented experience with the following: Regulations, Standards and Frameworks Payment … CardIndustryDataSecurityStandard (PCI-DSS) General Data Protection Regulation (GDPR) and Privacy Practices ISO 27001/2 Knowledge of OWASP 10 NIST Cybersecurity Framework (CSF) CIS and Benchmarking By joining Morrisons, you not only become an essential asset to our success but also open doors to More ❯
Colorado Springs, Colorado, United States Hybrid / WFH Options
OSAAVA Services
firewalls to support secure access and business continuity. • Governance & Compliance Alignment: Ensure designs align with enterprise security policies, compliance requirements (e.g., NIST, ISO 27001, PCI-DSS), and architecture governance standards. Key Skills & Experience • 8+ years of experience in network security, cybersecurity architecture, or network engineering-including 3+ years More ❯
Huntsville, Alabama, United States Hybrid / WFH Options
OSAAVA Services
firewalls to support secure access and business continuity. • Governance & Compliance Alignment: Ensure designs align with enterprise security policies, compliance requirements (e.g., NIST, ISO 27001, PCI-DSS), and architecture governance standards. Key Skills & Experience • 8+ years of experience in network security, cybersecurity architecture, or network engineering-including 3+ years More ❯
Huntsville, Alabama, United States Hybrid / WFH Options
General Dynamics Information Technology
and next-gen firewalls to support secure access and business continuity Ensure designs align with enterprise security policies, compliance requirements (e.g., NIST, ISO 27001, PCI-DSS), and architecture governance standards Basic Qualifications: Bachelor's or Master's degree in Cybersecurity, Computer Science, Network Engineering, or a related field More ❯
Cheltenham, Gloucestershire, United Kingdom Hybrid / WFH Options
Accenture
standards, guidelines, and regulatory compliance requirements related to information security and cloud computing such as GDPR, ISO 27001, Cloud Security Alliance, NIST 800-53, PCIDSS, ISA/IEC 62443, NERC CIP, HIPAA, etc. Knowledge of public cloud environments Azure, AWS or Google Cloud. Closing Date for Applications More ❯
security engineering and operations. In-depth knowledge of networking protocols, operating systems, and cloud technologies. Strong understanding of security principles, practices, and frameworks (e.g., PCI, NIST, ISO 27001). Experience with security tools such as SIEM, IDS/IPS, endpoint protection, and penetration testing tools. Experience with public cloud More ❯
Dundee, Angus, United Kingdom Hybrid / WFH Options
DC Thomson
security information and event management (SIEM) tools, and data loss prevention (DLP) solutions Adhere to relevant security standards and compliance requirements (e.g., ISO 27001, PCIDSS, GDPR) Work with our SecOps team to develop and implement vulnerability management programs, including regular security assessments, penetration testing, and remediation planning More ❯
Bexhill-On-Sea, East Sussex, South East, United Kingdom Hybrid / WFH Options
Hastings Direct
Bicep, ARM templates, Terraform). Hands-on experience with SIEM tools, ideally Azure Sentinel. Understanding of regulatory and compliance frameworks (e.g., CIS Benchmarks, HIPAA, PCI-DSS). Excellent problem-solving skills, communication, and the ability to explain technical concepts to non-technical stakeholders. Desirable: Relevant certifications such as More ❯
brighton, south east england, united kingdom Hybrid / WFH Options
Hastings Direct
Bicep, ARM templates, Terraform). Hands-on experience with SIEM tools, ideally Azure Sentinel. Understanding of regulatory and compliance frameworks (e.g., CIS Benchmarks, HIPAA, PCI-DSS). Excellent problem-solving skills, communication, and the ability to explain technical concepts to non-technical stakeholders. Desirable: Relevant certifications such as More ❯
bexhill, south east england, united kingdom Hybrid / WFH Options
Hastings Direct
Bicep, ARM templates, Terraform). Hands-on experience with SIEM tools, ideally Azure Sentinel. Understanding of regulatory and compliance frameworks (e.g., CIS Benchmarks, HIPAA, PCI-DSS). Excellent problem-solving skills, communication, and the ability to explain technical concepts to non-technical stakeholders. Desirable: Relevant certifications such as More ❯
Basingstoke, Hampshire, United Kingdom Hybrid / WFH Options
Automobile Association
cloud infrastructure on AWS/Azure platforms. Develop and implement security strategies to protect cloud environments and ensure compliance with industry standards (e.g., GDPR, PCIDSS, ISO 27001). Lead and mentor a high-performing team of digital professionals, fostering a culture of innovation and continuous improvement. Conduct More ❯
Cyber Security or Cyber Security Professional Qualifications/Certifications Desirable: General understanding of IT Security principles, standards and regulations (e.g. ISO 27001, NIST, CIS, PCIDSS and GDPR) CISM/CISSP Patch Management Applications, EDR/XDR systems. Antivirus, NAC - Forescout Vulnerability Scanning Tool e. Tenable One, Qualisys More ❯
london, south east england, united kingdom Hybrid / WFH Options
The Curve Group
Cyber Security or Cyber Security Professional Qualifications/Certifications Desirable: General understanding of IT Security principles, standards and regulations (e.g. ISO 27001, NIST, CIS, PCIDSS and GDPR) CISM/CISSP Patch Management Applications, EDR/XDR systems. Antivirus, NAC - Forescout Vulnerability Scanning Tool e. Tenable One, Qualisys More ❯