1 to 25 of 74 Remote/Hybrid PCI DSS Jobs in the UK

activities, and act as a trusted point of contact for internal teams and external assessors.You will work across Checkout's core compliance frameworks including PCI DSS v4.0.1, ISO 27001, SOC 2, and emerging regulatory obligations such as DORA and the EU AI Act, supporting our global footprint across … regulated markets worldwide.How You'll Make an ImpactGovernance, Risk and Compliance Programme ManagementOwn and manage defined workstreams within Checkout's GRC programme, including PCI DSS v4.0.1, ISO 27001, SOC 2, and relevant regulatory obligations across our global licensed entities.Coordinate control evidence collection activities across internal teams, ensuring continuous ...

running of Planet's database estate across Microsoft SQL Server, Oracle and MySQL, spanning on-premise, Azure and AWS platforms within a large PCI DSS scope. This is a hands-on delivery and service management role rather than a line-management one: the database engineering capacity sits with … when a database problem needs an owner. Alongside the run, you will drive a live cost-optimisation agenda and carry the database evidence for PCI DSS and internal audit. The role reports to the Senior Director - DWP & Infrastructure Services.What you will do:Database service delivery ...

security governance, operations, compliance, and risk management across a complex technology estate spanning payments, healthcare, and B2B SaaS.With ongoing M&A activity, active PCI-DSS obligations, and a rapidly evolving platform landscape, you'll play a critical role in protecting our customers, supporting business growth, and embedding security … Oversee security operations, including threat detection, incident response, and remediation Act as the executive lead during security incidents and manage external stakeholder communications Own PCI-DSS compliance across ClearAccept and ClearDebit payment platforms Lead the Group's Governance, Risk and Compliance (GRC) function, including ISO 27001, Cyber Essentials ...

management including PIN keys, DUKPT, master/session key hierarchies, and TR-31 or TR-34 key exchange. Experience with key lifecycle management, PCI PIN and PCI-DSS scope experience is required.Application security at scale. SAST/DAST/SCA toolchain design and rollout. Threat modelling … publish runbooks, standards, ADRs, and reporting dashboards. If it isn't documented, it didn't happen.Comfort with a small team carrying real regulatory scope. PCI-DSS, PCI PIN, DORA and GDPR are constraints on the work, not optional context.Nice to have:Open source contributions or side projects ...

Senior Information Security Analyst - Audit & Compliance ISO27001, SOC2, PCI-DSS, NIST, GDPR London (Barbican). Hybrid. 2 days a week onsite. Up to £100k plus 8% bonus, pension, private medical etc We're working with a global technology partner to find a certified Information Security Analyst. This … Collaborate with IT & Security teams to identify and remediate vulnerabilities. What We're Looking For Strong knowledge of audit & compliance frameworks (ISO 27001,SOC2, PCI DSS, Cyber Essentials) Experience with CSOC tools such as Rapid7 InsightIDR or other SIEM solutions. Hands-on experience with internal/external audits ...

security scales without frictionDefining and enforcing cloud security architecture standards, guardrails, and policy-as-code inline with industry best practices including NIST, CIS, and PCI DSS.Use Wiz or equivalent CNAPP/CSPM to continuously assess, prioritise, and drive remediation of misconfigurations and vulnerabilities against CIS, NIST, and PCI … DSS benchmarks.Security MonitoringFine tune, and maintain modern SIEM platform (e.g. Sentinel) including KQL detection rules, workbooks, logging pipelines, and AI-assisted alert triage.Map detection coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps across the cloud estate.Maintain alignment to PCI DSS, SOC2, ISO27001 ...

alignment and be a key technical driver in the cyber security roadmapSOC Relationship: Design playbooks and tune detection with Arctic Wolf’s Concierge TeamCompliance: PCI-DSS audit cycle running smoothly; IR and DR plans tested and currentThe ideal candidate will have strong experience of Infrastructure and Network connectivity … along with experience in a Microsoft environment including 365, Entra ID and SharePoint. They will understand IT compliance audit processes such as PCI-DSS, as well as some hands-on cyber security experience. The role will offer plenty of autonomy and ownership over the cyber security roadmap ...

.Manage and coordinate incident response, investigation, reporting and post-incident improvement actions.Maintain compliance and evidence for key standards/frameworks, including (as applicable) PSN, PCI-DSS, Cyber Essentials Plus, GDPR, DSP Toolkit and wider public sector assurance requirements.Drive security awareness and practical adoption of secure ways of working … public sector, regulated, or complex enterprise environment.Knowledge of NCSC-aligned security principles and practical governance/assurance approaches.Security compliance and audit-readiness (e.g., PSN, PCI-DSS, GDPR, Cyber Essentials Plus and similar frameworks).Microsoft security tooling (e.g., Sentinel, Defender, and M365 E5 security capabilities); exposure to Copilot ...

DoingFramework & Regulatory Alignment: Help maintain, improve, and scale our security compliance programmes, ensuring ongoing alignment with standards such as SOC 2, ISO 27001, and PCI-DSS, as well as regulator expectations and UK GDPR.Risk & Mitigation: Collaborate on identifying security risks across the business - including emerging risks from … FinTech).Compliance & Risk Expertise: A strong, foundational understanding of security risk management principles and hands-on experience working with compliance frameworks (e.g. ISO 27001, PCI-DSS, or SOC 2).Risk-First & Pragmatic Mindset: A natural tendency to start with the "why" (the risk) rather than the checklist. ...

brands, experiencing the variety of our business and the services we deliver. We are currently recruiting for a Digital Transformation Manager (PCI) | 6-Month Fixed-Term Contrac t.This is a Hybrid role, working with Compass Group brands and CH&CO stakeholders. Salary: £65,000 - £75,000 DOE + company … payment terminal replacement projects. Conduct site discovery and requirements gathering activities. Understand and document operational requirements using WITY principles. Ensure compliance with PCI DSS requirements and company standards. Manage suppliers, third-party installers and internal deployment teams. Oversee decommissioning and disposal of legacy equipment. Coordinate installation schedules ...

repeatable deployments across all locations.Develop and maintain network build standards, configuration templates, and technical runbooksEnsure all designs meet FinTech regulatory and security requirements (e.g., PCI-DSS, SOC2)Own the reference architecture and standard design patterns used for new office deployments and office expansions.Operations, Monitoring & User ExperienceProvide escalation support … segmentation, 802.1XFamiliarity with MPLS, VPLS, and internet circuit procurementExperience working with third-party vendors and ISPs across multiple geographiesComfortable working in a regulated environment (PCI-DSS, SOC2 awareness is a plus)DesirableCCNP/CCIE (Routing & Switching)Fortinet NSE 4-7 (Network Security)Exposure to network automation tooling (Ansible ...

security clearance to be considered. Technical Knowledge Security frameworks including ISO 27001, NIST CSF, CIS and NCSC guidance Regulatory landscape including GDPR and PCI DSS Familiarity with HMG and NCSC standards Modern technology environments: Cloud platforms such as Azure, AWS and Google Cloud Microsoft 365 Infrastructure and network ...

rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute to incident detection ...

rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute to incident detection ...

rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute to incident detection ...

rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute to incident detection ...

rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute to incident detection ...

rest and in transit) using KMS, ACM, and TLS policy. Support compliance and audit requirements (e.g. CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS as applicable) and produce evidence. Partner with migration, platform, and application teams to unblock security issues without slowing delivery. Contribute to incident detection ...

Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment and configuration management. Compliance & Governance: Knowledge of regulatory frameworks (SOX, PCI-DSS, GDPR) and hands-on incident response/forensics experience. Please be clear that only candidates that meet the above criteria with ...

intelligence platformsIndustry certifications such as CISSP, CCSP, CEH, or relevant cloud certificationsExperience in a high-growth SaaS environmentKnowledge of compliance frameworks (NIST, ISO 27001, PCI-DSS, etc.)Note: This role may require up to 25% travel to customer sites and company events.#LI-GT1#LI-RemoteBenefits of Working at CrowdStrike ...

Knowledge: Solid comprehension of ISO 27001 principles, threat modelling frameworks, vulnerability scanning, risk treatment life-cycles, and secondary compliance standards (e.g., SOC 2 or PCI DSS). Qualifications: Relevant technical diploma or equivalent practical background, reinforced by desirable professional credentials (such as CISSP, CEH, CCNA Security ...

Splunk, Log Rhythm, Qualys Implementing security technology controls, secure config and implementation of security projects Information security risks management, controls and frameworks (NIST, CIS, PCI-DSS) IT Systems, Networking XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview Azure ...

experience gained as a Security Architect or in a technical cyber role working across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures ...

programmes Provide security consultancy across complex business and technology initiatives Advise clients on security frameworks and compliance requirements including ISO 27001, NIST, GDPR and PCI-DSS Conduct security risk assessments and identify appropriate mitigations Support threat modelling and secure solution design activities Identify vulnerabilities within system architectures ...

risks, and achieve or maintain compliance with recognised standards and frameworks including ISO/IEC 27001, Cyber Assessment Framework (CAF), Cyber Essentials, SOC-2, PCI, DSS, GDPR, and other relevant regulatory or contractual requirements. This is a customer-facing consultancy role, requiring confident engagement with senior stakeholders, clear … best practice frameworks Knowledge of additional frameworks such as CAF, NIS-2, NIST Cybersecurity Framework, CIS Controls, SOC 2, ISO 22301, ISO 27701 or PCI DSS. ExperienceusingGRC,auditmanagement,riskregisterorreporting tools. HoldSC/DVclearanceorwillingnesstoundertakesecurity vetting. MemberofCiSPoranotherrelevantprofessional community. Willingnesstostudyforandattainfurtherrelated qualifications. Experienceofimplementingandmanaging ISO 9001. As a GRC/Information Security Consultant ...