1 to 25 of 138 Permanent PCI DSS Jobs in the UK excluding London

aligned to regulatory, client, and internal requirements. The role partners with business, technology, audit, and group stakeholders to drive practical compliance outcomes across PCI DSS, DORA, and other regulatory and risk frameworks, internal control assurance, security awareness compliance, and client due diligence activity. Crucial to this role … Analyst is responsible for supporting the day-to-day operation of PayTech's security compliance activities. This includes maintaining evidence and documentation, assisting with PCI DSS readiness, coordinating responses to internal audit and client assurance requests, owning the security awareness programme and activities, liaising with our learning teams ...

Analyst - Payments/PCI-DSS/ISO Manchester - office based 4 days a week, remote 1 day a week £55-60k pa A successful payment technology company are seeking a GRC Analyst to join their growing Security team and be responsible for risk management, compliance monitoring … governance support as well as 3rd party vendor risk management. As a GRC Analyst you will ensure compliance with all relevant regulations including PCI-DSS, GDPR, ISO 27001, NIS Regulations and the Data Protection Act 2018. Any experience with Attestation of Compliance (AoC) is beneficial. This role will ...

Security Architect | London | £90,000-£110,000 | PCI DSS 4.0 | GCP | GKE We're working with a growing, PE-backed technology business operating at the heart of the global payments and travel ecosystem. Following significant investment and continued product growth, they are strengthening their security capability and looking … come back to you ASAP What you'll be doing Own and develop security architecture across cloud, applications, APIs and infrastructure Support and maintain PCI DSS 4.0 compliance, including audit and evidence requirements Strengthen security across a predominantly GCP and Kubernetes/GKE environment Drive DevSecOps and Shift ...

experience and simplify compliance. Its patented cloud-based technologies protect sensitive data across all customer interactions and channels, ensuring compliance with industry standards like PCI DSS while reducing fraud risk and strengthening trust. Founded in 2009 as Semafone, Sycurio supports organizations in over 50 countries across five continents … your default for scaffolding, tests, documentation and proofs of concept, and the review and verification guardrails that let us do this safely in a PCI DSS Level 1 environment. Find repetitive work and automate it. How we work PCI DSS Level 1 environment: peer review, test ...

evolving technology risks while driving operational and control improvements. You’ll have a particular focus of this role will be supporting the delivery of PCI DSS and SWIFT Cyber Security Programme (CSP) advisory and assurance engagements across financial services, payments, fintech and broader regulated sectors. This role offers … small teams and working collaboratively with strong project management and organisational skills to manage multiple engagements A strong understanding of payment security principles and PCI DSS requirements would be an advantage A current PCI DSS Qualified Security Assessor (QSA) certification. Additional certifications such as CISSP, CISA ...

ensure security is embedded by design, not added as an afterthought. Your work will span from threat modeling and risk assessment to architecting PCI‐DSS compliant solutions, building the secure infrastructure that underpins our global mobility and payments platforms. This is your opportunity to influence how a fast … threat modeling, proactively identifying vulnerabilities and mitigation strategies. Develop and maintain security policies and frameworks aligned with NIST, ISO 27001, and CIS Controls. Lead PCI‐DSS architecture and compliance, ensuring both front‐ and back‐office systems meet standards. Guide and mentor teams in best‐practice security engineering, fostering ...

organisation's Information Security Management System (ISMS) , including policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST/CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess … Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO 27001/27002, NIST, CIS Controls, PCI-DSS and Cyber Essentials Plus . Experience developing and maintaining security policies and procedures. Experience with third-party/vendor risk management ...

federated services . Oversee information security risk management, including risk registers, policy exceptions and remediation plans. Lead and support ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST/CIS Controls and customer compliance requirements. Manage and provide assurance around internal and external audits, including remediation of findings. Provide … experience implementing and improving ISO 27001/ISMS and security controls. Strong understanding of security frameworks including ISO 27001/27002, NIST, CIS Controls, PCI-DSS and Cyber Essentials Plus . Experience leading security projects, audits, assessments and remediation programmes. Strong understanding of information security risk ...

Good Energy Change Advisory Board, and ensuring security and resilience impacts are considered and that technical owners complete agreed actions before implementation where required. PCI-DSS Compliance: Coordinate and support PCI-DSS control activity, evidence gathering, control testing and remediation tracking where technology controls … ideally while working alongside technical teams who own implementation. Awareness of recognised security standards or frameworks such as ISO27001, Cyber Essentials, NCSC CAF and PCI-DSS. Strong verbal and written communication skills, with the ability to explain technical matters clearly to non-technical audiences. Demonstrable attention to detail ...

Drive continuous improvement of governance, risk and compliance (GRC) processes, reporting, automation and assurance activities. Support regulatory, internal and external audit requirements such as PCI -DSS, ensuring documentation and evidence are maintained to a high standard. Qualifications What we are looking for: Previous experience within a relevant function … multinational organisations. Knowledge of NIST Cybersecurity Framework, ISO 27001, COBIT and ITIL. Experience with data analytics, continuous controls monitoring or assurance automation. Familiarity with PCI DSS, SOX or other regulatory and compliance frameworks. Additional Information Along with your benefits package we also offer a wide range of perks ...

Design and maintain enterprise security architecture aligned with business objectives and government security frameworks. Ensure compliance with security standards and regulations including ISO 27001 , PCI DSS , GDPR , GovAssure , NCSC Cyber Assessment Framework , and Secure by Design principles. Develop and manage the security architecture compliance roadmap in collaboration with … external partners, and stakeholders to develop secure, resilient, and compliant solutions. Requirements Enterprise Security Architecture Cloud Security (Azure, Hybrid and On-Premises) ISO 27001 PCI DSS GDPR GovAssure Framework NCSC Cyber Assessment Framework (CAF) Secure by Design Governance, Risk and Compliance (GRC) Risk Assessment and Risk Management Identity ...

industry bodies and turns them into action. Define regulatory, contractual, and breach‐notification obligations, and keep security controls aligned with compliance frameworks (e.g. PCI DSS, SOC 2) and cyber insurance requirements. Own the Information Security budget and make resourcing and tooling recommendations. Production Environment Security Define and maintain … explain risk clearly to executives and engineers alike Desirable Criteria Experience in fintech, payments, or SaaS organizations handling financial data. Working knowledge of PCI DSS 4.0 and experience supporting audits or a SOC 2 Type 2 program. Experience with cloud security posture management and software supply‐chain security. ...

Development Lifecycle (SDLC) processes and solutions, compliance and consultancy activities. These activities will need to comply with standards such as ISO27002, Cyber Essential Plus, PCI-DSS, DPA:2018. EU Directives and PASF as well as customer specific requirements while also aligning with ISO22301 and resiliency requirements. … equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK Previous experience and knowledge of security frameworks i.e. ISO27001, NIST, CIS Controls and PCI-DSS compliance An understanding of HMG security standards (e.g. Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.). Experience of Enterprise Project ...

Development Lifecycle (SDLC) processes and solutions, compliance and consultancy activities. These activities will need to comply with standards such as ISO27002, Cyber Essential Plus, PCI-DSS, DPA:2018. EU Directives and PASF as well as customer specific requirements while also aligning with ISO22301 and resiliency requirements. … equivalent recognized Information Security discipline Degree: NCSC-certified degrees - NCSC.GOV.UK Previous experience and knowledge of security frameworks i.e. ISO27001, NIST, CIS Controls and PCI-DSS compliance An understanding of HMG security standards (e.g. Security Policy Framework, Cyber Essentials Plus, Cloud security principles etc.). Experience of Enterprise Project ...

governance. Key responsibilities include: Managing and enhancing cyber security governance and compliance frameworks. Owning and developing the organisation's GRC platform. Leading PCI DSS compliance activities and supporting audit requirements. Managing supplier security assurance and third-party risk assessments. Advising projects and stakeholders on cyber security and compliance … requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology initiatives. We're keen to speak with cyber security, risk, governance and compliance ...

projects aligned with the wider Information Security Strategy Provide authoritative guidance on regulatory requirements, data protection and security frameworks including ISO 27001, NIST, PCI DSS and GDPR Oversee security governance across projects, procurement and development activity, ensuring risks are addressed throughout the SDLC and DPIA process Maintain information … CISSP, CISM, CISA, an MSc or an equivalent recognised qualification Proven experience managing ISO 27001 and other security governance frameworks such as NIST or PCI DSS Strong understanding of data protection and regulatory requirements including GDPR, FCA, ICO and PRA expectations Experience assessing and managing supplier security risks ...

projects aligned with the wider Information Security Strategy Provide authoritative guidance on regulatory requirements, data protection and security frameworks including ISO 27001, NIST, PCI DSS and GDPR Oversee security governance across projects, procurement and development activity, ensuring risks are addressed throughout the SDLC and DPIA process Maintain information … CISSP, CISM, CISA, an MSc or an equivalent recognised qualification Proven experience managing ISO 27001 and other security governance frameworks such as NIST or PCI DSS Strong understanding of data protection and regulatory requirements including GDPR, FCA, ICO and PRA expectations Experience assessing and managing supplier security risks ...

effectiveness of information security controls and identify opportunities for improvement. Apply recognised security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, PCI-DSS, and other relevant best practices in a proportionate and risk-based manner. Liaise with Cyber Security, IT, Business Continuity, Data Protection, Risk, Compliance … risk assessments, control reviews, audits, or assurance activities. Technical knowledge of information security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, DORA, PCI-DSS, and related security practices. Strong communicator with positive influencing and interpersonal skills. Ability to synthesise complex technical and business information and present ...

capability and lead the response to incidents and suspected data breaches. Lead the business to Cyber Essentials Plus and towards ISO 27001 readiness, maintaining PCI DSS and supporting UK GDPR compliance. Write and own our security, acceptable use and AI usage policies, and run security‐awareness training across … incident response, including real incidents. Evidence of building with AI and automation, with comfort in scripting (Python, TypeScript, shell) and APIs. Working knowledge of PCI DSS and UK GDPR. Strong communication skills and the confidence to challenge decisions where there is genuine risk. Desirable Experience in ecommerce ...

help establish consistent DevOps and platform engineering standards. You will also ensure that our deployment and automation processes meet security and regulatory requirements, including PCI DSS, ISO 27001 and Cyber Essentials. Experience within financial services, a regulated environment or another service-critical industry would be particularly valuable. This … technologies AWS certifications, such as Solutions Architect Professional, DevOps Engineer Professional or Security Specialty Experience mentoring engineers or helping set technical and platform standards PCI DSS or other regulated-industry experience SRE principles, error budgets, ITIL or service management practices Automated testing and quality gates within CI/ ...

security hardening and infrastructure upgrades. Support corporate IT infrastructure, including Google Workspace, device management and endpoint security. Contribute to infrastructure security and compliance, including PCI-DSS requirements. Identify opportunities to automate processes and modernise legacy infrastructure. Skills & Experience Required We're looking for an experienced Infrastructure Engineer, Systems … Experience with any of the following would be advantageous: Google Kubernetes Engine (GKE) and wider GCP services. Cassandra, ScyllaDB or other distributed database technologies. PCI-DSS, ISO 27001 or SOC 2 compliance environments. GitOps, ArgoCD or Kustomize. Istio or other service mesh technologies. Cloudflare, including ...

security hardening and infrastructure upgrades. Support corporate IT infrastructure, including Google Workspace, device management and endpoint security. Contribute to infrastructure security and compliance, including PCI-DSS requirements. Identify opportunities to automate processes and modernise legacy infrastructure. Skills & Experience Required We're looking for an experienced Infrastructure Engineer, Systems … Experience with any of the following would be advantageous: Google Kubernetes Engine (GKE) and wider GCP services. Cassandra, ScyllaDB or other distributed database technologies. PCI-DSS, ISO 27001 or SOC 2 compliance environments. GitOps, ArgoCD or Kustomize. Istio or other service mesh technologies. Cloudflare, including ...

network capacity and performance, manage resource utilisation efficiently, and conduct thorough cost analytics to identify optimisation opportunities.**What you will be doing:*** Ensure PCI DSS compliance and implement best practices such as the latest encryption, access control, documentation and patching to maintain the highest level of security.* Collaborate … using AWS tools and services.* Certifications in relevant technologies: Possession of industry certifications to validate expertise.* Experience with compliance and security standards: Familiarity with PCI DSS and other relevant security frameworks to ensure the infrastructure meets regulatory requirements and best practices.* Strong problem-solving collaboration and incident management ...

Ireland’s technical security strategy, standards, processes and controls. Ensuring compliance with Cyber Essentials as a minimum, National Cyber Security Centre guidance, GDPR, PCI DSS and other relevant regulatory requirements. Managing major security incidents and overseeing risks relating to information security, physical security, business continuity, crisis management, privacy … areas: IT security, cyber security, technology risk, privacy, governance or compliance. Security controls across infrastructure, cloud platforms, applications or data environments. Cyber Essentials, GDPR, PCI DSS, ISO standards or other security frameworks. Security incidents, vulnerability management, patching or penetration testing. Working with third-party technology suppliers and partners. ...

technologies. Track emerging threats and assess how they could affect the organisation. Align security practices with standards such as ISO 27000 series, PCI DSS, COBIT, NIST and OWASP. Identify security risks and recommend proportionate controls and remediation. About You Broad knowledge of modern enterprise technology, including Cloud … threat modelling frameworks such as STRIDE and MITRE ATT&CK. Significant knowledge of endpoint, network, cryptography and IAM security. Awareness of ISO 27000 series, PCI DSS, COBIT, NIST and OWASP. A security management certification such as CISSP, CISM or CCSP, and a technical security certification such ...