1 to 25 of 93 Permanent PCI DSS Jobs in London

security governance, operations, compliance, and risk management across a complex technology estate spanning payments, healthcare, and B2B SaaS. With ongoing M&A activity, active PCI-DSS obligations, and a rapidly evolving platform landscape, you'll play a critical role in protecting our customers, supporting business growth, and embedding … Oversee security operations, including threat detection, incident response, and remediation Act as the executive lead during security incidents and manage external stakeholder communications Own PCI-DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group's Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials ...

protect the confidentiality, integrity, and availability of our information assets, intellectual property, and customer data, ensuring strict compliance with regulatory frameworks including FCA, DORA, PCI DSS, and Edenred group security requirements.**Key Responsibilities:*** Lead the PayTech Information Security function with alignment to Edenred’s wider cyber risk management … Crime and Anti-Fraud teams to mitigate cyber risks related to financial crime.* Manage third-party security risk due diligence programs.* Lead and maintain PCI DSS and PCI PIN compliance and engagement with Qualified Security Assessors (QSAs).* Drive cyber awareness programs and phishing simulations to embed ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership * Own the end-to-end payment card … senior escalation point for complex incidents and service issues. * Maintain operational procedures, technical documentation, and support models. * Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management * Lead the delivery of payment-related projects and strategic initiatives. * Coordinate internal stakeholders, suppliers ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership * Own the end-to-end payment card … senior escalation point for complex incidents and service issues. * Maintain operational procedures, technical documentation, and support models. * Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management * Lead the delivery of payment-related projects and strategic initiatives. * Coordinate internal stakeholders, suppliers ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership * Own the end-to-end payment card … senior escalation point for complex incidents and service issues. * Maintain operational procedures, technical documentation, and support models. * Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management * Lead the delivery of payment-related projects and strategic initiatives. * Coordinate internal stakeholders, suppliers ...

commercially effective payment services while leading a small technical team and delivering key business initiatives. Payment Processing Expertise, Fintech Knowledge, Technical Architecture, Vendor Management PCI DSS & P2PE Compliance, Mobile Application Management, Loyalty Platform Management, Commercial Awareness Key Responsibilities Payment Platform Ownership* Own the end-to-end payment card … senior escalation point for complex incidents and service issues.* Maintain operational procedures, technical documentation, and support models.* Ensure compliance with industry standards, including PCI DSS and P2PE requirements.Team LeadershipProject and Change Management* Lead the delivery of payment-related projects and strategic initiatives.* Coordinate internal stakeholders, suppliers, and business ...

Senior Information Security Analyst - Audit & Compliance ISO27001, SOC2, PCI-DSS, NIST, GDPR London (Barbican). Hybrid. 2 days a week onsite. Up to £100k plus 8% bonus, pension, private medical etc We're working with a global technology partner to find a certified Information Security Analyst. This … Collaborate with IT & Security teams to identify and remediate vulnerabilities. What We're Looking For Strong knowledge of audit & compliance frameworks (ISO 27001,SOC2, PCI DSS, Cyber Essentials) Experience with CSOC tools such as Rapid7 InsightIDR or other SIEM solutions. Hands-on experience with internal/external audits ...

scales without friction Defining and enforcing cloud security architecture standards, guardrails, and policy-as-code inline with industry best practices including NIST, CIS, and PCI DSS. Use Wiz or equivalent CNAPP/CSPM to continuously assess, prioritise, and drive remediation of misconfigurations and vulnerabilities against CIS, NIST, and PCI … DSS benchmarks. Security Monitoring Fine tune, and maintain modern SIEM platform (e.g. Sentinel) including KQL detection rules, workbooks, logging pipelines, and AI-assisted alert triage. Map detection coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps across the cloud estate. Maintain alignment to PCI ...

senior escalation point for complex incidents and service issues. Maintain operational procedures, technical documentation, and support models. Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Team Leadership Project and Change Management Lead the delivery of payment-related projects and strategic initiatives. Coordinate internal stakeholders, suppliers … business value. Security and Compliance Lead the implementation and ongoing management of Point-to-Point Encryption (P2PE) across the estate. Ensure compliance with PCI DSS and other applicable payment industry standards. Support security audits, assessments, and remediation activities. Maintain awareness of emerging threats and regulatory developments. Serve ...

Selfridges is seeking a PCI Assurance Analyst to own the PCI DSS program. You will interpret requirements, lead gap analyses, coordinate SAQs and AOCs, and work with QSAs, acquirers and brands to drive compliant outcomes. The role focuses on scoping, evidence validation, and remediation planning, with reporting … senior stakeholders and guidance on secure design for PCI scoped systems. Based in London, the position supports a strong compliance culture and risk-based decision making within IT #J-18808-Ljbffr ...

Information Security Architecture & Engineering Lead (UK-based) The Information Security Architecture & Engineering Lead forms the technical heart of PCI Pal’s Information Security function. The role owns cloud architecture review, DevSecOps and secure SDLC practice, security automation and tooling, and security architecture strategy for the organisation, replacing reactive, post … secure coding practices. Experience threat-modelling applications and cloud workloads at the design stage, not just reviewing them after deployment. Working knowledge of PCI DSS v4.0.1. ISO/IEC 27001:2022; familiarity with ISO/IEC 42001:2023 is an advantage. Experience triaging and remediating findings from ...

privacy, securing our company and data against cyber threats. We operate in a highly secure global SaaS organization that holds multiple certifications such as PCI‐DSS, ISO/IEC 27001, SOC, HIPAA, IRAP and works with a large, federated customer base. Responsibilities Develop and lead a team … approach to staying updated with the latest security threats, vulnerabilities and mitigation techniques. Advantageous Skills and Experience Experience working on projects ensuring compliance with PCI DSS, ISO/IEC 27001, SOC, HIPAA, IRAP controls. Knowledge of security compliance standards relevant to the SaaS industry such as PCI ...

ideally within financial services, banking, or payments. Experience in InfoSec and Cyber Security. Experience setting up policies and processes in InfoSec area. Familiarity with PCI-DSS, ISO27001, SOC 2/3 or other global standards. Familiarity with regulatory requirements (DORA, PCI-DSS, PSD2, GDPR). Understanding … identify areas for improvement. Performing security risk and control assessments for new products or initiatives. Working with third party InfoSec auditors (penetration testing, PCI compliance etc.). Conduct regular risk assessments and vulnerability assessments to identify security gaps and develop appropriate mitigation plans. Conducting regulatory gap analysis for regulations ...

lead all aspects of external audits and certifications supporting lottery customers, including but not limited to SOC 1, SOC 2, ISO 27001, WLA-SCS, PCI-DSS, and jurisdiction-specific requirements.* Maintain audit readiness throughout all iLottery regions by conducting proactive control evaluations, identifying gaps, monitoring remediation progress … audit methodologies, internal controls, risk management, and governance frameworks.* Experience with recognized industry benchmarks and certifications such as SOC 1, SOC 2, ISO 27001, PCI-DSS, WLA-SCS, NIST, COBIT, or comparable frameworks.* Strong analytical, problem-solving, and decision-making capabilities.* Excellent communication, presentation, and collaborator management skills. ...

coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards/frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR, DSP Toolkit and wider public sector assurance requirements. Drive security awareness and practical adoption of secure ways of working … regulated, or complex enterprise environment. Knowledge of NCSC-aligned security principles and practical governance/assurance approaches. Security compliance and audit-readiness (e.g., PSN, PCI-DSS, GDPR, Cyber Essentials Plus and similar frameworks). Microsoft security tooling (e.g., Sentinel, Defender, and M365 E5 security capabilities); exposure to Copilot ...

coordinate incident response, investigation, reporting and post-incident improvement actions. Maintain compliance and evidence for key standards/frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR, DSP Toolkit and wider public sector assurance requirements. Drive security awareness and practical adoption of secure ways of working … regulated, or complex enterprise environment. Knowledge of NCSC-aligned security principles and practical governance/assurance approaches. Security compliance and audit-readiness (e.g., PSN, PCI-DSS, GDPR, Cyber Essentials Plus and similar frameworks). Microsoft security tooling (e.g., Sentinel, Defender, and M365 E5 security capabilities); exposure to Copilot ...

Foundations, establishing centralized monitoring and alerting (via Wiz/Security Hub). Data Privacy & Compliance End-to-End Privacy: Own the GDPR and PCI-DSS compliance programmes, embedding "Privacy by Design" and data minimization directly into our delivery processes. Legal Partnership: Collaborate with Legal to manage DPAs, transfer … information security, including leadership-level responsibility Proven experience building and scaling security and privacy programmes within growing organisations Strong hands-on knowledge of GDPR, PCI-DSS, incident response, and resilience planning Experience working within cloud-first environments, ideally AWS Strong understanding of security within e-commerce, fintech ...

continually improving the organisation’s cyber security strategy, roadmap and governance framework. Maintaining compliance with FCA regulatory expectations and international security standards including PCI DSS, ISO 27001, DORA, PSD2, NIST and CIS Controls. Building and maintaining an effective cyber security governance framework, including policies, standards, risk management processes … Experience implementing and maintaining cyber security governance frameworks, policies, standards, procedures and security roadmaps. Experience managing security programs aligned to recognized frameworks such as PCI DSS, ISO 27001, NIST CSF, CIS Controls, SOC 2, DORA, PSD2 and SWIFT CSCF (where applicable). Experience leading regulatory, customer and certification ...

cyber risks before solutions go live. Help maintain and evolve our Information Security Management System, ensuring alignment with frameworks including ISO 27001, NIST and PCI DSS. Partner with Architecture, Engineering, Technology and third-party suppliers to embed effective security controls into new and existing technology solutions. Produce clear security … Security Consultant, Security Architect or Cyber GRC role within a complex technology environment. Strong knowledge of information security frameworks and standards, including ISO 27001, PCI DSS, NIST or equivalent industry best practice. Experience conducting security risk assessments, security assurance activities and advising on secure technology design across ...

enable stakeholders to make informed security decisions. You’ll also contribute to the wider Security function by supporting compliance and certification activities, including GDPR, PCI DSS and ISO 27001. We’d love to hear from you if you have Hands‐on experience with Splunk, including developing and tuning … collaborate effectively across teams and explain technical concepts clearly to both technical and non‐technical stakeholders. Experience supporting compliance frameworks such as GDPR, PCI DSS or ISO 27001 would be helpful but isn’t essential. More information Enjoy fantastic perks like private healthcare & dental insurance, a generous work ...

company's Governance, Risk & Compliance capability, including: Reviewing the current compliance landscape and identifying gaps Building a practical compliance framework across the business Leading PCI DSS compliance initiatives Developing and improving GDPR processes and documentation Supporting security standards such as ISO 27001, SOC 2 and/or Cyber … today and creating a practical roadmap to get everything where it needs to be. Ideally you'll have experience with: Governance, Risk & Compliance (GRC) PCI DSS GDPR ISO 27001, SOC 2 and/or Cyber Essentials Security governance and audit preparation Policy creation and documentation Risk management frameworks ...

pricing, taxation, invoicing, reconciliation and revenue-recognition integrations. Support fraud prevention and chargeback mitigation with internal teams and external providers. Security and compliance Minimise PCI DSS scope through tokenisation and provider-managed payment services, and support relevant compliance assessments. Ensure payment flows meet applicable Strong Customer Authentication … Practical understanding of payment providers, payment orchestration, subscription lifecycles and the failure modes that contribute to revenue loss and involuntary churn. Working knowledge of PCI DSS, PSD2 Strong Customer Authentication, 3-D Secure and relevant data-protection obligations. Experience designing cloud-scale microservices and direct-to-consumer platforms. ...

Lead IS&S compliance governance activities, reviews and stakeholder engagement. Oversee IS&S compliance against regulatory and contractual obligations including Smart Energy Code (SEC), PCI DSS, ISO27001 and NIS Regulations. Develop IS&S compliance reporting, schedules and improvement plans. Support audits, assurance activities and security input into projects. … ideally have... Proven experience in information security compliance, governance and risk management. An understanding of regulatory regulations such as the Smart Energy Code (SEC), PCI DSS, 27001 and NIS Regulation. Experience engaging with auditors, regulators and business stakeholders Ability to translate complex security compliance requirements for both technical ...

driving adoption of new platforms or ways of working across multiple teams. Experience working in regulated environments or with strict compliance requirements (e.g., GDPR, PCI‐DSS, SOC 2, DMA, and EU AI Act). Demonstrated ability to establish programme governance and operating models from scratch in ambiguous … Skills Excellent Communication Leadership Skills Decision‐Making Influencing Stakeholders Navigating Complexity Certifications & Qualifications PMP Agile Project Management Certification AWS Cloud Practitioner Industry Keywords GDPR PCI‐DSS SOC 2 DMA EU AI Act Tools & Technologies Jira Confluence Smartsheet Cloud‐Native Designs Microservices #J-18808-Ljbffr ...

senior escalation point for complex incidents and service issues. Maintain operational procedures, technical documentation, and support models. Ensure compliance with industry standards, including PCI DSS and P2PE requirements. Lead the delivery of payment-related projects and strategic initiatives. Coordinate internal stakeholders, suppliers, and business teams to deliver successful … business requirements into technical solutions. Experience managing mobile applications and customer-facing digital platforms. Strong incident management and problem‐solving capabilities. Experience operating within PCI DSS‐regulated environments. Desirable Experience P2PE implementation experience. Knowledge of loyalty platforms and customer engagement technologies. Experience in large‐scale retail, hospitality, fuel ...