1 to 25 of 115 Remote/Hybrid PCI DSS Jobs in the UK

aligned to regulatory, client, and internal requirements. The role partners with business, technology, audit, and group stakeholders to drive practical compliance outcomes across PCI DSS, DORA, and other regulatory and risk frameworks, internal control assurance, security awareness compliance, and client due diligence activity. Crucial to this role … Analyst is responsible for supporting the day-to-day operation of PayTech's security compliance activities. This includes maintaining evidence and documentation, assisting with PCI DSS readiness, coordinating responses to internal audit and client assurance requests, owning the security awareness programme and activities, liaising with our learning teams ...

Travis Perkins plc is now hiring for a proactive and detail-oriented Governance, Risk, and Compliance (GRC) Infosec Manager (PCI … join our central Information Security team. This is a high-visibility, specialised role focused on leading our Group-wide Payment Card Industry (PCI) compliance ecosystem. Reporting directly to the Senior GRC Infosec Manager, you will serve as the primary subject matter expert and point of contact for external Qualified ...

security governance, operations, compliance, and risk management across a complex technology estate spanning payments, healthcare, and B2B SaaS. With ongoing M&A activity, active PCI-DSS obligations, and a rapidly evolving platform landscape, you’ll play a critical role in protecting our customers, supporting business growth, and embedding … Oversee security operations, including threat detection, incident response, and remediation Act as the executive lead during security incidents and manage external stakeholder communications Own PCI-DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group’s Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials ...

multi‐region AWS infrastructure, payment pipelines and payment pages, wallets holding members' money, the cardholder and personal data behind them, and a regulatory perimeter - PCI DSS, DORA, Bank of Lithuania and FCA rules - that rises every year. Working at staff/senior staff level as an individual contributor … roadmap that shapes how Vinted Pay defends its infrastructure and payment assets, rather than reacting to the next audit. Turn regulation into engineering: map PCI DSS, DORA, and Bank of Lithuania and FCA requirements into practical, automated security controls and engineering guardrails - compliance as a by‐product ...

authorisation mechanisms are in place Engineer and automate technical controls within GCP to ensure and demonstrate continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify … market for different banks' regulators Hands‐on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2, ISO 27001 and PCI DSS/ ...

authorisation mechanisms are in place Engineer and automate technical controls within GCP to ensure and demonstrate continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify … market for different banks' regulators Hands-on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2, ISO 27001 and PCI DSS/ ...

some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside … developmentDevelop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us)Develop systems, automations, and methods of security observability to push the GRC engineering ...

some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside … Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us) Develop systems, automations, and methods of security observability to push the GRC engineering ...

some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside … Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us) Develop systems, automations, and methods of security observability to push the GRC engineering ...

Travis Perkins plc is seeking a Governance, Risk, and Compliance Infosec Manager (PCI) to join our central Information Security team in the UK. The role leads PCI DSS programme delivery, QSA engagement and cross‐functional security governance. Hybrid working pattern with one day per week ...

investigate identity‐related alerts. Support access reviews, privileged access reviews and entitlement governance. Assist with audit evidence and remediation activities relating to SOX, PCI DSS, GDPR and other applicable requirements. Support incident response by providing identity information, access logs and technical assistance with containment activities. Contribute to reducing … Identity or Microsoft Sentinel. Azure Monitor and Log Analytics. Microsoft Graph API or Azure automation. Passwordless authentication, FIDO2 and passkeys. Application SSO integration. SOX, PCI DSS, GDPR or ISO 27001 environments. General Microsoft Azure administration. Qualifications and Certifications A degree in Computer Science, Cyber Security, Infrastructure Engineering ...

secure-by-default principles to day-to-day security engineering. Implement and maintain agreed security controls and technical standards. Support security requirements relating to PCI DSS, SOX, GDPR, ISO 27001 and other applicable frameworks. Assist with audit evidence gathering, control validation and remediation activities. Maintain security documentation, procedures … security services such as GuardDuty, Security Hub, IAM or CloudTrail. Experience working with an external SOC, MSSP or security service provider. Exposure to PCI DSS, SOX, GDPR, ISO 27001, CIS or NIST environments. Qualifications & Certifications A degree in Cyber Security, Computer Science, Information Technology or a related discipline ...

organisation's Information Security Management System (ISMS) , including policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST/CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess … Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO 27001/27002, NIST, CIS Controls, PCI-DSS and Cyber Essentials Plus . Experience developing and maintaining security policies and procedures. Experience with third-party/vendor risk management ...

Good Energy Change Advisory Board, and ensuring security and resilience impacts are considered and that technical owners complete agreed actions before implementation where required. PCI-DSS Compliance: Coordinate and support PCI-DSS control activity, evidence gathering, control testing and remediation tracking where technology controls … ideally while working alongside technical teams who own implementation. Awareness of recognised security standards or frameworks such as ISO27001, Cyber Essentials, NCSC CAF and PCI-DSS. Strong verbal and written communication skills, with the ability to explain technical matters clearly to non-technical audiences. Demonstrable attention to detail ...

federated services . Oversee information security risk management, including risk registers, policy exceptions and remediation plans. Lead and support ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST/CIS Controls and customer compliance requirements. Manage and provide assurance around internal and external audits, including remediation of findings. Provide … experience implementing and improving ISO 27001/ISMS and security controls. Strong understanding of security frameworks including ISO 27001/27002, NIST, CIS Controls, PCI-DSS and Cyber Essentials Plus . Experience leading security projects, audits, assessments and remediation programmes. Strong understanding of information security risk ...

assessments and gap analyses, translating results into actionable remediation plans Support alignment and readiness activities for ISO 27001 and other relevant frameworks (e.g., PCI DSS, GLBA, state/federal financial regulations as applicable) Maintain a unified control framework that maps overlapping requirements across multiple standards to reduce duplicate … audits (as a practitioner preparing evidence, not just an auditor) Working knowledge of NIST CSF and ISO 27001 (or similar frameworks like PCI DSS, HITRUST) Experience with a GRC automation platform (Anecdotes, Vanta, Drata, Secureframe, OneTrust, ServiceNow GRC, or similar) Comfort working with API integrations to ingest data ...

technical levels, supporting board-level decision‐making while driving operational security improvements aligned to recognised standards such as NIST CSF, ISO 27001, DORA, PCI‐DSS, and MITRE ATT&CK. Reporting To: Director/Head of Cyber Security Location: London (Hybrid) Employment Type: Full‐Time Salary … OWASP Top 10). Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with ISO 27001. Ensure alignment with GDPR, PCI‐DSS, DORA, NIST CSF, COBIT, SANS, and related frameworks. Develop security policies, SOPs, and governance documentation. Conduct IT resilience and cloud security audits. ...

where some products are today outside the standard tooling. Governance, risk and compliance and vendor management Own ISO 27001, SOC 1, SOC 2 and PCI DSS compliance, the audit calendar, the compliance automation platform and the relationship with our auditors. Work with legal and the Data Protection Officer … facing those customers on security matters. Working knowledge of ISO 27001 and SOC 2, and experience of being accountable for audits and certifications. PCI DSS experience is an advantage. Practical understanding of cloud security on AWS and Azure, Kubernetes-based platforms, infrastructure as code and modern CI/ ...

network capacity and performance, manage resource utilisation efficiently, and conduct thorough cost analytics to identify optimisation opportunities.**What you will be doing:*** Ensure PCI DSS compliance and implement best practices such as the latest encryption, access control, documentation and patching to maintain the highest level of security.* Collaborate … using AWS tools and services.* Certifications in relevant technologies: Possession of industry certifications to validate expertise.* Experience with compliance and security standards: Familiarity with PCI DSS and other relevant security frameworks to ensure the infrastructure meets regulatory requirements and best practices.* Strong problem-solving collaboration and incident management ...

with operating in a regulated environment. We are a regulated financial institution, and you would be supporting our compliance capabilities to maintain alignment with PCI-DSS, ISO27001, DORA, and many more. A developer and engineering mindset. A practical understanding of how software is built in a professional environment … reshape how a scaling engineering organisation builds software securely. Direct exposure to banking-licence-scale security work in a regulated payments environment, with PCI DSS, DORA, and GDPR as live constraints on the work. Room to grow: Building and growing your own capability is mutually beneficial ...

lasting improvements. Develop resilience and disaster recovery plans. Implement secrets management, network protection and identity and access controls. Support the technical controls required for PCI-DSS compliance and FCA requirements. Automate routine operations and reduce manual intervention. Create reusable tooling and self-service capabilities that help developers deliver … operating cloud infrastructure as a Platform Engineer or SRE. Desirable experience Building platforms for fintech, banking or payments businesses. Supporting compliance frameworks such as PCI-DSS, SOC 2 or ISO 27001. Establishing monitoring and on-call processes from scratch. Operating multi-tenant SaaS platforms. The package Generous annual ...

more effective, scalable and industry-leading third party security capability as Monzo grows! Delivering security assurance activities: lead and contribute to control testing, PCI DSS assessments, regulatory reviews, and internal and external audits. Evaluate evidence, identify gaps and work with teams across Monzo to see findings and remediation … your knowledge and skills. It would be great if... You’ve worked in financial services, fintech, or another highly regulated environment. You’ve supported PCI DSS, ISO 27001, SOC 2 or NIST-aligned assurance, regulatory reviews, or internal and external audits. Not ticking every box? That’s totally ...

more effective, scalable and industry-leading third party security capability as Monzo grows! Delivering security assurance activities: lead and contribute to control testing, PCI DSS assessments, regulatory reviews, and internal and external audits. Evaluate evidence, identify gaps and work with teams across Monzo to see findings and remediation … your knowledge and skills. It would be great if... You’ve worked in financial services, fintech, or another highly regulated environment. You’ve supported PCI DSS, ISO 27001, SOC 2 or NIST-aligned assurance, regulatory reviews, or internal and external audits. Not ticking every box? That’s totally ...

office, 1 day remote) focuses on risk management, compliance monitoring and governance support within the security team. You will ensure compliance with PCI-DSS, GDPR, ISO 27001, NIS Regulations, and the Data Protection Act 2018, with beneficial AoC experience and strong ability to communicate security requirements to stakeholders. ...

high performance. The role focuses on patching Linux servers, automating infrastructure with Ansible, Terraform and Git, and keeping documentation up to date while meeting PCI-DSS requirements. This hybrid Swindon role offers a supportive team and a range of benefits to help you thrive. #J-18808-Ljbffr ...