126 to 150 of 325 PCI DSS Jobs in England

proportionate, effective controls. Act as Product Owner for a flagship cyber programme — owning epics/features, prioritisation and roadmaps to outcomes. Govern security by design, ensure compliance (ISO 27001, PCI DSS, GDPR/NIS) and align to enterprise security strategy. Advise senior stakeholders; collaborate across architecture, engineering and suppliers to land pragmatic, secure solutions. What you’ll bring More ❯

proportionate, effective controls. Act as Product Owner for a flagship cyber programme — owning epics/features, prioritisation and roadmaps to outcomes. Govern security by design, ensure compliance (ISO 27001, PCI DSS, GDPR/NIS) and align to enterprise security strategy. Advise senior stakeholders; collaborate across architecture, engineering and suppliers to land pragmatic, secure solutions. What you’ll bring More ❯

Lead roles JSP440, JSP604/453 & JSP490 Working with system secure design MOD/GDS Secure by Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience More ❯

principles. Design secure AWS landing zones and integrate native security services (IAM, KMS, GuardDuty, WAF). Establish monitoring, logging, and incident response playbooks. Ensure regulatory compliance (ISO 27001, GDPR, PCI-DSS) and perform risk assessments. Automate security controls in CI/CD pipelines; enforce compliance via AWS Config and IaC. Embed security in migration lifecycle; validate posture pre More ❯

principles. Design secure AWS landing zones and integrate native security services (IAM, KMS, GuardDuty, WAF). Establish monitoring, logging, and incident response playbooks. Ensure regulatory compliance (ISO 27001, GDPR, PCI-DSS) and perform risk assessments. Automate security controls in CI/CD pipelines; enforce compliance via AWS Config and IaC. Embed security in migration lifecycle; validate posture pre More ❯

and application domains (e.g. SIEM, IAM, PAM, DLP, endpoint protection). Provide security assurance and governance across projects, ensuring alignment with frameworks such as ISO 27001, NIST, GDPR, and PCI DSS. Collaborate with enterprise, technology, and business stakeholders to deliver practical, innovative, and cost-effective security solutions. What we're looking for 5-10 years' experience in information or More ❯

and application domains (e.g. SIEM, IAM, PAM, DLP, endpoint protection). Provide security assurance and governance across projects, ensuring alignment with frameworks such as ISO 27001, NIST, GDPR, and PCI DSS. Collaborate with enterprise, technology, and business stakeholders to deliver practical, innovative, and cost-effective security solutions. What we’re looking for 5–10 years’ experience in information or More ❯

and application domains (e.g. SIEM, IAM, PAM, DLP, endpoint protection). Provide security assurance and governance across projects, ensuring alignment with frameworks such as ISO 27001, NIST, GDPR, and PCI DSS. Collaborate with enterprise, technology, and business stakeholders to deliver practical, innovative, and cost-effective security solutions. What we’re looking for 5–10 years’ experience in information or More ❯

and application domains (e.g. SIEM, IAM, PAM, DLP, endpoint protection). Provide security assurance and governance across projects, ensuring alignment with frameworks such as ISO 27001, NIST, GDPR, and PCI DSS. Collaborate with enterprise, technology, and business stakeholders to deliver practical, innovative, and cost-effective security solutions. What we’re looking for 5–10 years’ experience in information or More ❯

compliance: Build security-by-design into solution proposals; incorporate best practices for data protection, vulnerability management, IAM, SOC/IR readiness, and regulatory requirements relevant to SMBs (e.g., HIPAA, PCI-DSS, GDPR nuances as applicable). Customer engagement and discovery: Conduct customer workshops, requirements gathering, current-state assessments, risk analyses, ROI/tco analysis, and roadmaps that translate More ❯

compliance: Build security-by-design into solution proposals; incorporate best practices for data protection, vulnerability management, IAM, SOC/IR readiness, and regulatory requirements relevant to SMBs (e.g., HIPAA, PCI-DSS, GDPR nuances as applicable). Customer engagement and discovery: Conduct customer workshops, requirements gathering, current-state assessments, risk analyses, ROI/tco analysis, and roadmaps that translate More ❯

compliance: Build security-by-design into solution proposals; incorporate best practices for data protection, vulnerability management, IAM, SOC/IR readiness, and regulatory requirements relevant to SMBs (e.g., HIPAA, PCI-DSS, GDPR nuances as applicable). Customer engagement and discovery: Conduct customer workshops, requirements gathering, current-state assessments, risk analyses, ROI/tco analysis, and roadmaps that translate More ❯

compliance: Build security-by-design into solution proposals; incorporate best practices for data protection, vulnerability management, IAM, SOC/IR readiness, and regulatory requirements relevant to SMBs (e.g., HIPAA, PCI-DSS, GDPR nuances as applicable). Customer engagement and discovery: Conduct customer workshops, requirements gathering, current-state assessments, risk analyses, ROI/tco analysis, and roadmaps that translate More ❯

compliance: Build security-by-design into solution proposals; incorporate best practices for data protection, vulnerability management, IAM, SOC/IR readiness, and regulatory requirements relevant to SMBs (e.g., HIPAA, PCI-DSS, GDPR nuances as applicable). Customer engagement and discovery: Conduct customer workshops, requirements gathering, current-state assessments, risk analyses, ROI/tco analysis, and roadmaps that translate More ❯

for occasional travel and out-of-hours support. Exposure to MxDR/SOC environments and advanced security protocols (SIEM, IDS/IPS, firewalls). Knowledge of GDPR, Cyber Essentials+, PCI-DSS, and other compliance standards. Strong grasp of data protection legislation (e.g., GDPR, Data Protection Act). Global Impact: Your leadership will help protect the digital infrastructure that More ❯

occasional travel and out-of-hours support. Desirable: Exposure to MxDR/SOC environments and advanced security protocols (SIEM, IDS/IPS, firewalls). Knowledge of GDPR, Cyber Essentials+, PCI-DSS, and other compliance standards. Strong grasp of data protection legislation (e.g., GDPR, Data Protection Act). Why Join Us? Global Impact: Your leadership will help protect the More ❯

Lead roles JSP440, JSP604/453 & JSP490 Working with system secure design MOD/GDS Secure by Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience More ❯

workstations to auditing equipment. An important part of the role is understanding and enforcing compliances such as the General Data Protection Regulation (GDPR), Payment Card Industry Data Security Standard (PCI DSS) and more. Plus ad hoc tasks as required by the wider business. We are looking for someone who has a proven background in IT Support or qualifications More ❯

InfoSec strategy aligned business goals Oversee security architecture, vulnerability management, incident response and threat intelligence Lead security risk assessments and manage remediation plans for gaps Financial regulation compliance - GDRP, PCI DSS, SOX, FCA Establish security policies, standards & procedures Repost security posture, incidents & key metrics Drive security awareness and training programmes Manage relationships with external auditors, regulators and security More ❯

Secure AWS Landing Zones from the ground up. Native Security: Integrate and manage core AWS services (e.g., IAM, KMS, GuardDuty, WAF). Compliance: Enforce regulatory standards (GDPR, ISO 27001, PCI-DSS). Automation: Embed security via IaC (Terraform/CloudFormation) and CI/CD pipelines. Strategy: Architect IAM policies and implement Zero-Trust principles. Risk: Perform risk assessments More ❯

Secure AWS Landing Zones from the ground up. Native Security: Integrate and manage core AWS services (e.g., IAM, KMS, GuardDuty, WAF). Compliance: Enforce regulatory standards (GDPR, ISO 27001, PCI-DSS). Automation: Embed security via IaC (Terraform/CloudFormation) and CI/CD pipelines. Strategy: Architect IAM policies and implement Zero-Trust principles. Risk: Perform risk assessments More ❯

Secure AWS Landing Zones from the ground up. Native Security: Integrate and manage core AWS services (e.g., IAM, KMS, GuardDuty, WAF). Compliance: Enforce regulatory standards (GDPR, ISO 27001, PCI-DSS). Automation: Embed security via IaC (Terraform/CloudFormation) and CI/CD pipelines. Strategy: Architect IAM policies and implement Zero-Trust principles. Risk: Perform risk assessments More ❯

Secure AWS Landing Zones from the ground up. Native Security: Integrate and manage core AWS services (e.g., IAM, KMS, GuardDuty, WAF). Compliance: Enforce regulatory standards (GDPR, ISO 27001, PCI-DSS). Automation: Embed security via IaC (Terraform/CloudFormation) and CI/CD pipelines. Strategy: Architect IAM policies and implement Zero-Trust principles. Risk: Perform risk assessments More ❯

Secure AWS Landing Zones from the ground up. Native Security: Integrate and manage core AWS services (e.g., IAM, KMS, GuardDuty, WAF). Compliance: Enforce regulatory standards (GDPR, ISO 27001, PCI-DSS). Automation: Embed security via IaC (Terraform/CloudFormation) and CI/CD pipelines. Strategy: Architect IAM policies and implement Zero-Trust principles. Risk: Perform risk assessments More ❯

Secure AWS Landing Zones from the ground up. Native Security: Integrate and manage core AWS services (e.g., IAM, KMS, GuardDuty, WAF). Compliance: Enforce regulatory standards (GDPR, ISO 27001, PCI-DSS). Automation: Embed security via IaC (Terraform/CloudFormation) and CI/CD pipelines. Strategy: Architect IAM policies and implement Zero-Trust principles. Risk: Perform risk assessments More ❯