1 to 25 of 39 PCI DSS Jobs in the UK excluding London

CYBER SECURITY LEAD | PCI-DSS, Data Security, Governance, Compliance, Retail Over 1,000,000,000 (1bn) card transactions per annum Payment Card Industry Data Security Standards (PCI-DSS) Data Security, IT Governance, Compliance ISO 27001, Cyber Essentials, GDPR, NIST, CISSP, CISM This huge Retail & Hospitality business … seeking an experienced Cyber Security Lead with extensive PCI-DSS compliance and governance experience to work in partnership with numerous business Stakeholders and Peers in taking ownership of the organisation's cyber security strategy, policies and controls. You will lead on security incident responses, manage vulnerability and penetration ...

security governance, operations, compliance, and risk management across a complex technology estate spanning payments, healthcare, and B2B SaaS. With ongoing M&A activity, active PCI-DSS obligations, and a rapidly evolving platform landscape, you'll play a critical role in protecting our customers, supporting business growth, and embedding … Oversee security operations, including threat detection, incident response, and remediation Act as the executive lead during security incidents and manage external stakeholder communications Own PCI-DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group's Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials ...

influence. What You’ll Be Doing Developing, maintaining and continually improving the Information Security Management System (ISMS) Supporting compliance with NIST CSF 2.0, PCI DSS, the UK Data Protection Act 2018 and other relevant requirements Coordinating internal and external security audits and leading evidence collection Administering the cyber … Bring 4–5+ years’ experience in a GRC, Information Security or Cyber Security role Strong knowledge of cyber risk management, NIST CSF 2.0, PCI DSS and UK GDPR Hands-on experience with cyber risk assessments and third-party assurance programmes A track record of writing policies, standards ...

governance. Key responsibilities include: Managing and enhancing cyber security governance and compliance frameworks. Owning and developing the organisation's GRC platform. Leading PCI DSS compliance activities and supporting audit requirements. Managing supplier security assurance and third-party risk assessments. Advising projects and stakeholders on cyber security and compliance … requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology initiatives. We're keen to speak with cyber security, risk, governance and compliance ...

projects aligned with the wider Information Security Strategy Provide authoritative guidance on regulatory requirements, data protection and security frameworks including ISO 27001, NIST, PCI DSS and GDPR Oversee security governance across projects, procurement and development activity, ensuring risks are addressed throughout the SDLC and DPIA process Maintain information … CISSP, CISM, CISA, an MSc or an equivalent recognised qualification Proven experience managing ISO 27001 and other security governance frameworks such as NIST or PCI DSS Strong understanding of data protection and regulatory requirements including GDPR, FCA, ICO and PRA expectations Experience assessing and managing supplier security risks ...

security hardening and infrastructure upgrades. Support corporate IT infrastructure, including Google Workspace, device management and endpoint security. Contribute to infrastructure security and compliance, including PCI-DSS requirements. Identify opportunities to automate processes and modernise legacy infrastructure. Skills & Experience Required We're looking for an experienced Infrastructure Engineer, Systems … Experience with any of the following would be advantageous: Google Kubernetes Engine (GKE) and wider GCP services. Cassandra, ScyllaDB or other distributed database technologies. PCI-DSS, ISO 27001 or SOC 2 compliance environments. GitOps, ArgoCD or Kustomize. Istio or other service mesh technologies. Cloudflare, including ...

technologies. Track emerging threats and assess how they could affect the organisation. Align security practices with standards such as ISO 27000 series, PCI DSS, COBIT, NIST and OWASP. Identify security risks and recommend proportionate controls and remediation. About You Broad knowledge of modern enterprise technology, including Cloud … threat modelling frameworks such as STRIDE and MITRE ATT&CK. Significant knowledge of endpoint, network, cryptography and IAM security. Awareness of ISO 27000 series, PCI DSS, COBIT, NIST and OWASP. A security management certification such as CISSP, CISM or CCSP, and a technical security certification such ...

lasting improvements. Develop resilience and disaster recovery plans. Implement secrets management, network protection and identity and access controls. Support the technical controls required for PCI-DSS compliance and FCA requirements. Automate routine operations and reduce manual intervention. Create reusable tooling and self-service capabilities that help developers deliver … operating cloud infrastructure as a Platform Engineer or SRE. Desirable experience Building platforms for fintech, banking or payments businesses. Supporting compliance frameworks such as PCI-DSS, SOC 2 or ISO 27001. Establishing monitoring and on-call processes from scratch. Operating multi-tenant SaaS platforms. The package Generous annual ...

customers. Secure the Platform: Oversee identity and user account lifecycle management, PKI, and payment-related engineering, ensuring they are robust, auditable, and aligned to PCI-DSS and ISO 27001. What you'll bring Proven experience scaling engineering teams in a high-growth or scaled digital business, ideally C# … setting, and in an environment with strict change, incident, and problem management controls. Experience with user account management, PKI, or payment platforms. Familiarity with PCI-DSS and ISO 27001 standards. Benefits: Salary up to £120,000. Enhanced company pension contribution. 25 days annual leave, increasing with tenure. Access ...

incident reports and practical security recommendations to technical and non-technical stakeholders. Support security governance and compliance requirements, including UK GDPR, ISO 27001 and PCI DSS where applicable. Improve SOC processes, playbooks, tooling and reporting, while mentoring junior security colleagues. About You We are looking for an experienced ...

implementing security by design, AWS security services such as IAM, WAF and KMS, and controls aligned with compliance frameworks such as ISO 27001 and PCI DSS. Infrastructure as Code: Extensive experience designing and implementing Infrastructure as Code solutions using Terraform, CloudFormation, CDK or equivalent, establishing reusable patterns and best ...

business teams, driving security risk assessments, compliance initiatives, business continuity planning and audit programmes. You will oversee regulatory and certification activities including ISO 27001, PCI DSS and NIS2, while ensuring identified risks are clearly communicated, prioritised and effectively remediated. The role offers significant exposure to cloud security governance ...

bring 7+ years in information security CISSP, CISM, CISA, an MSc or equivalent Hands-on ISO 27001 experience, plus frameworks such as NIST and PCI DSS Information security risk management and supplier assurance Working knowledge of FCA, PRA, ICO and GDPR requirements The ability to explain technical risk ...

JSP490 Working with system secure design MOD/GDS Secure by Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards ...

professional qualifications or certifications (e.g. CISA, CRISC, CISSP, COBIT, QSA or equivalent). Experience in the financial sector, especially in relation to SWIFT and PCI-DSS would be an advantage Knowledge of FCA, PRA, DORA, NIS2, GDPR, or other relevant regulatory frameworks. You'll also be able ...

recovery activities. Lead security investigations and oversee remediation Drive compliance with security policies, standards and regulatory requirements, including ISO 27001, Cyber Essentials and PCI-DSS.Manage security audits, risk assessments and improvement plansDeliver security reporting, metrics and risk updates to senior stakeholders and governance forums. Partner with technology and business … security improvement programmes. Excellent stakeholder management and communication skills, with the ability to influence at all levels. Strong understanding of ISO 27001, Cyber Essentials, PCI-DSS and wider security best practices. Experience leading teams and driving positive change across technology and business functions. A pragmatic and commercial approach ...

recovery activities. Lead security investigations and oversee remediation Drive compliance with security policies, standards and regulatory requirements, including ISO 27001, Cyber Essentials and PCI-DSS. Manage security audits, risk assessments and improvement plans Deliver security reporting, metrics and risk updates to senior stakeholders and governance forums. Partner with technology … security improvement programmes. Excellent stakeholder management and communication skills, with the ability to influence at all levels. Strong understanding of ISO 27001, Cyber Essentials, PCI-DSS and wider security best practices. Experience leading teams and driving positive change across technology and business functions. A pragmatic and commercial approach ...

Test for production issues, respond to incidents, and perform related countermeasures. Assist with industry security compliance standards such as DSP Toolkit, ISO27001, Cyber Essentials & PCI DSS. Monitor security solutions and triage incidents through to resolution About us CHFT is an integrated acute and community Trust serving diverse communities across ...

encryption. Experience with threat modelling, security assessments and architectural risk analysis. Understanding of regulatory and security frameworks such as ISO 27001, NIST, GDPR and PCI-DSS. Experience with cloud and/or network security would be highly advantageous. Strong stakeholder management and communication skills, with the ability to influence ...

Ability to handle ambiguity and make decisions and recommendations with limited data Understanding of various Cyber/IT Security frameworks e.g. NIST; ISO-27001; PCI-DSS; EBA-ICT and FFIEC Solid analytical/problem-solving skills with capability to identify solutions to unusual and complex problems PERSONAL REQUIREMENTS ...

performance fundamentals Understanding of DB connectivity/authentication Replication and HA concepts Security & Compliance Fundamentals Vulnerability and risk concepts Encryption fundamentals Compliance standards awareness (PCI-DSS, SOX, HIPAA, GDPR) Diagnostic Tools Wireshark, tcpdump, curl/Postman, Fiddler, Splunk/Kibana basics, Database tracing tools Good to have Basic ...

Security & Compliance: Understanding of AWS security services, including IAM, WAF and KMS, alongside security best practices and compliance frameworks such as ISO 27001 and PCI DSS. Infrastructure as Code & Automation: Experience evaluating Infrastructure as Code approaches using Terraform, CloudFormation or CDK, alongside an understanding of scripting and automation technologies ...

multiple initiatives. Ability to work hybrid, 2 days per week in the office. Desirable Skills Awareness of security standards and frameworks, including ISO 27000, PCI DSS, COBIT, NIST and OWASP. CISSP, CISM, CCSP or equivalent security management certification. CEH, OSCP or equivalent technical security certification. Experience working with ...

role in protecting and enhancing our AWS cloud environment, ensuring security controls, configurations and services remain aligned with industry best practice, internal standards and PCI DSS requirements. Working closely with engineering, architecture and risk teams, you'll identify and remediate security risks, strengthen cloud monitoring and threat detection … means of relating business needs to security controls as well as a knowledge of common information security management frameworks, such as NIST, PCI, ISO27001, Mitre and ITIL frameworks. You'll also have an understanding of security policies, processes, procedures and standards and how to embed these in existing business ...

Experience with email security and Data Loss Prevention (DLP) Knowledge of security frameworks and compliance standards such as ISO27001, Cyber Essentials, NIST or PCI DSS Ability to work independently and communicate effectively with technical and non-technical stakeholders Desirable Experience Exposure to Purple Team activities, combining offensive ...