Own our security tooling (e.g. Snyk) and processes to ensure vulnerabilities are identified, prioritised, and remediated. Collaborate with the compliance team to prepare for PCIDSS, ISO 27001, and other upcoming certifications. Build on existing robust security practices by implementing new policies, best practices, and security frameworks as … both). Have experience with Terraform or another IaC tool. Solid understanding of DevSecOps practices, including vulnerability scanning, threat modelling, or compliance frameworks (GDPR, PCIDSS, ISO 27001). Thrive in a fast-moving, sometimes ambiguous environment where you can have a big impact. Comfortable mentoring other engineers More ❯
and technical specifications for development teams through Jira tickets. Conduct gap analysis between current and future-state payment architectures. Ensure compliance with regulatory requirements (PCI-DSS, etc.) in all payment processes. Functional Architecture & Payment Integration Define and document end-to-end payment transaction workflows, system integrations, and API … major PSPs (e.g., Stripe, Adyen, Worldpay, PayPal, Braintree, etc.). Solid understanding of RESTful APIs, SOAP, JSON, XML, and payment gateway protocols. Knowledge of PCI-DSS compliance, PSD2, 3D Secure (3DS), tokenization, and fraud prevention measures. Familiarity with cloud platforms (AWS) and microservices-based architectures. Proficiency in using More ❯
within your technical domains, for example, monitoring NIST, CIS, UK NCSC, Stay up to date with regulatory mandates impacting our customers, e.g. OFCOM, TSA, PCI-DSS, Achieve and maintain technology certifications and competencies when required. Qualifications and Experience Experience working in the technology Industry - preferably with Tier … s business problems, that can then potentially be solved with a technology-based solution. Technical expertise: Strong knowledge of Cybersecurity and associated standards, including PCI-DSS, TSA, Secure-by-Design. Knowledge of technology and operational landscape for SOC, Observability, Zero-Trust, Knowledge of at least one out of More ❯
ensure high availability and performance. Secure IT Systems by implementing security policies, monitoring for threats, and ensuring compliance with relevant regulations (e.g., GDPR, SOX, PCIDSS) and industry standards. Support physical network infrastructure by configuring and maintaining servers, appliances, L2/L3 switches, VLANs, and network security. Optimise … processes and documentation for all areas of responsibility to enable efficient controls and ways of working. Ensure IT compliance and governance with GDPR, SOX, PCIDSS, and other relevant regulatory frameworks, meeting or exceeding deadlines. Take ownership of escalated requests or incidents from the IT Service Desk team More ❯
ensure high availability and performance. Secure IT Systems by implementing security policies, monitoring for threats, and ensuring compliance with relevant regulations (e.g. GDPR, SOX, PCIDSS) and industry standards. Support physical network infrastructure by configuring and maintaining servers, appliances, L2/L3 switches, VLANs, and network security. Optimise … for all areas of responsibility to enable efficient controls and ways of working. Ensure IT compliance and governance is adhered to for GDPR, SOX, PCIDSS and other regulatory framework the company adheres to, ensuring that commitments and deadlines are met or exceeded. Take ownership of any escalated More ❯
ensure high availability and performance. Secure IT Systems by implementing security policies, monitoring for threats, and ensuring compliance with relevant regulations (e.g. GDPR, SOX, PCIDSS) and industry standards. Support physical network infrastructure by configuring and maintaining servers, appliances, L2/L3 switches, VLANs, and network security. Optimise … for all areas of responsibility to enable efficient controls and ways of working. Ensure IT compliance and governance is adhered to for GDPR, SOX, PCIDSS and other regulatory framework the company adheres to, ensuring that commitments and deadlines are met or exceeded. Take ownership of any escalated More ❯
and ensure smooth delivery to production. Own monitoring, alerting, and observability, using tools like OpenTelemetry and Dynatrace. Security & Compliance: Ensure systems are compliant with PCIDSS, PSD2, and SCA. Champion secure coding practices and data protection across services. Collaboration & Mentoring: Work closely with product owners, engineering leads, and … including fraud, tokenisation, and settlement flows. Experience with cloud infrastructure (Azure preferred), CI/CD, and Kubernetes. Working knowledge of regulatory and compliance standards (PCIDSS, SCA, PSD2). Strong communication skills and the ability to explain complex technical concepts to a range of audiences. Experience working in More ❯
the aforementioned processes and integrations, providing clear and comprehensive guides for internal use and compliance purposes and enforce procedures to comply with/improve PCI-DSS, PCI-PIN, and PCI-3DS standards Maintain our testing environments and become experts in International Payment Schemes' test environments If … problem-solving skills to troubleshoot technical issues effectively Think creatively and insightfully about business problems Familiarity with industry standards and compliance requirements, such as PCI-DSS. Strong communication and interpersonal skills to build relationships with internal and external stakeholders. Detail-oriented mindset with a focus on quality and accuracy More ❯
the aforementioned processes and integrations, providing clear and comprehensive guides for internal use and compliance purposes and enforce procedures to comply with/improve PCI-DSS, PCI-PIN, and PCI-3DS standards Maintain our testing environments and become experts in International Payment Schemes' test environments If … problem-solving skills to troubleshoot technical issues effectively Think creatively and insightfully about business problems Familiarity with industry standards and compliance requirements, such as PCI-DSS. Strong communication and interpersonal skills to build relationships with internal and external stakeholders. Detail-oriented mindset with a focus on quality and accuracy More ❯
Bradford, England, United Kingdom Hybrid / WFH Options
Morrisons
driving security policies and guide rails Experience working within a structured governance framework IT Security Qualification such as CISA/CISSP or BCS and PCI/ISA qualification Industry and Regulatory Experience The security architect is expected to have documented experience with the following: Regulations, Standards and Frameworks Payment … CardIndustryDataSecurityStandard (PCI-DSS) General Data Protection Regulation (GDPR) and Privacy Practices ISO 27001/2 Knowledge of OWASP 10 NIST Cybersecurity Framework (CSF) CIS and Benchmarking By joining Morrisons, you not only become an essential asset to our success but also open doors to More ❯
Bradford, south west england, united kingdom Hybrid / WFH Options
Morrisons
driving security policies and guide rails Experience working within a structured governance framework IT Security Qualification such as CISA/CISSP or BCS and PCI/ISA qualification Industry and Regulatory Experience The security architect is expected to have documented experience with the following: Regulations, Standards and Frameworks Payment … CardIndustryDataSecurityStandard (PCI-DSS) General Data Protection Regulation (GDPR) and Privacy Practices ISO 27001/2 Knowledge of OWASP 10 NIST Cybersecurity Framework (CSF) CIS and Benchmarking By joining Morrisons, you not only become an essential asset to our success but also open doors to More ❯
Azure Security Engineer. Experience in HR and payroll security or large-scale SaaS environments. Understanding of regulatory requirements like GDPR, SOC 2, ISO 27001, PCI DSS. Why Join Strada Global? Be part of a high-growth company cultivating a security-first culture. Engage with complex security challenges across cloud More ❯
employed technologies. Exposure to software development and understanding of secure code development. Compliance: Experience/willingness to assess Cyber Essential assessments and knowledge of PCIDSS requirements, in particular PCI ASV testing. Cloud Services: Understanding of cloud services, architecture, and technologies. Certifications: CPSA or higher qualifications are More ❯
CDI. Advanced understanding of IT infrastructure, including servers, storage, and virtualization. Familiarity with cloud security (Azure, AWS, etc.). Knowledge of compliance frameworks like PCIDSS, HIPAA, SOC 2. Proficiency with Windows, Linux, macOS, and network protocols. Understanding threat intelligence platforms and attack mitigation techniques. Strong problem-solving More ❯
Azure Security Engineer. Experience in HR and payroll security or securing large-scale SaaS environments. Understanding of regulatory requirements (GDPR, SOC 2, ISO 27001, PCIDSS). Why Join Strada Global? Be part of a high-growth company building a security-first culture. Work on complex security challenges More ❯
Cardiff, Wales, United Kingdom Hybrid / WFH Options
Creditsafe
CISM), Certified Information Systems Auditor (CISA) or other similar credentials. • Proven experience in managing security operations teams in a similar industry. • Familiarity with SOC2, PCI-DSS, ISO22301 and ISO27001 standards. Desirable Qualifications: • Bachelor’s or masters degree in CyberSecurity, Computer Science, Information Technology, or a related field • Cloud More ❯
Prevention, Incident Response, and Security Information and Event Management (SIEM), Identify and Access Management (IAM) controls. - Implementation experience with compliance frameworks such as NIST, PCI-DSS, ISO/IEC 27001, ISO/IEC 27017, FISC, etc. Amazon is committed to a diverse and inclusive workplace. Amazon is an More ❯
Operating System security and system hardening concepts such as CIS Benchmarks. Experience in working with information security frameworks and regulatory requirements including ISO27001, NIST, PCIDSS, GDPR, Cyber Essentials. Experience of general IT Audit processes and conducting risk assessments. You will be a proactive self-starter with strong More ❯
and effective. ️ Is This You? CISSP, CISA, or CISM certification is strongly recommended, but not required. ISO 27001/27701/42001, SOC-2, PCIDSS, and GDPR knowledge, experience, and qualifications are highly desirable. At least 5 years of relevant industry experience in information security, with a More ❯
security engineering and operations. In-depth knowledge of networking protocols, operating systems, and cloud technologies. Strong understanding of security principles, practices, and frameworks (e.g., PCI, NIST, ISO 27001). Experience with security tools such as SIEM, IDS/IPS, endpoint protection, and penetration testing tools. Experience with public cloud More ❯
security restructure programmes, projects of both a GRC and technical nature alongside frameworks such as ISO27001/2:2005/13, DORA, NIS 2, PCI-DSS, GDPR-DPO, NIST CSF SP800-53, PSD-2, FCA/PRA, and MS Azure. Ownership of Strategic, Operational, and Tactical IT SecurityMore ❯
information. Translate security requirements into architectural blueprints and patterns, balancing risk, budget, and operational challenges. Ensuring compliance with regulatory standards such as GDPR and PCI DSS. Provide subject matter expertise and assess security measures, recommending improvements in collaboration with IT teams. Build and maintain relationships with technology vendors and More ❯
Ability to travel to meet business needs Preferred competencies: Relevant cyber security or other qualifications, certifications such as CSX-P, CDPSE, SSCP, CAP, OWASP, PCIDSSSecurity Cleared with potential to gain enhanced clearances Experience implementing privacy solutions based on the requirements of the EU GDPR and UK More ❯
concepts including cryptography, authentication and authorization, access control, secure architectures, threat modeling, vulnerabilities and software security. Strong knowledge of regulatory requirements (e.g. GDPR, ISO27001, PCI-DSS) and experience in regulatory reporting. 3-5 years of experience in GRC, risk management, or compliance. A bachelor's degree in computer More ❯
knowledge of cloud security architecture, specifically within Azure (or other Cloud platforms). Familiarity with security frameworks and compliance standards such as NIST, GDPR, PCI-DSS, DESC ISR. Strong problem-solving skills, with the ability to think creatively to solve complex security challenges. BENEFITS: Competitive Salary: Base salary More ❯