5 of 5 Permanent PCI DSS Jobs in South Wales

Design and maintain enterprise security architecture aligned with business objectives and government security frameworks. Ensure compliance with security standards and regulations including ISO 27001 , PCI DSS , GDPR , GovAssure , NCSC Cyber Assessment Framework , and Secure by Design principles. Develop and manage the security architecture compliance roadmap in collaboration with … external partners, and stakeholders to develop secure, resilient, and compliant solutions. Requirements Enterprise Security Architecture Cloud Security (Azure, Hybrid and On-Premises) ISO 27001 PCI DSS GDPR GovAssure Framework NCSC Cyber Assessment Framework (CAF) Secure by Design Governance, Risk and Compliance (GRC) Risk Assessment and Risk Management Identity ...

manual implementation Build systems with security by design as a core foundation Ensure platform compliance with standards such as ISO 27001, SOC 2, PCI DSS and 3DS Design and operate key and secret management on GCP — Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager — including support ...

maintaining containers What skills are desirable: Knowledge of core cloud services Experience running services in Kubernetes Track record of maintaining compliant environments e.g. PCI-DSS Experience of developing clean and highly maintainable code: creating and improving existing infrastructure services and tooling - primarily in Golang Duties of the role ...

oversight, support, and advice to enable technical teams to make informed security decisions. Ensure continued compliance with key security standards and frameworks such as PCI, ISO 27001, Secure by Design, and GovAssure. Champion Secure by Design principles and ensure common security tools and patterns are used effectively to deliver ...

annual audits for industry specific reports, including ISO 27001, ISO 9001, ISO 14001, ISO 18001, IRAP-AUS, Cyber Essentials+, NHS DSPT, SOC1, SOC2, SOC3, PCI, HIPAA, HiTrust, CyberGRX. Conducts annual audits for industry specific reports, including GDPR, FEDRAM, CDSA. Required Knowledge Expert-level knowledge of UK NCSC security guidance … requirements. Expert-level knowledge of various Compliance Regulations/Standards; PCI, ISO27001, Audit Standard #70, Safe Harbor, HIPAA and FISMA. Expert-level knowledge of IT Risk Management, Governance, Risk and Compliance, Information Security, Data Privacy, Vendor Management, and/or Business Continuity Management. Certifications CRISC, CISM, CISSP - highly preferred. ...