26 to 50 of 289 PCI DSS Jobs

federated services . Oversee information security risk management, including risk registers, policy exceptions and remediation plans. Lead and support ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST/CIS Controls and customer compliance requirements. Manage and provide assurance around internal and external audits, including remediation of findings. Provide … experience implementing and improving ISO 27001/ISMS and security controls. Strong understanding of security frameworks including ISO 27001/27002, NIST, CIS Controls, PCI-DSS and Cyber Essentials Plus . Experience leading security projects, audits, assessments and remediation programmes. Strong understanding of information security risk ...

organisation's Information Security Management System (ISMS) , including policies, procedures and controls. Support the implementation and ongoing management of ISO 27001, Cyber Essentials Plus, PCI-DSS, NIST/CIS Controls and other relevant security requirements. Conduct security assessments across infrastructure, networks, endpoints, applications and data. Identify, assess … Experience with security audits, control testing, risk assessments and remediation . Knowledge of frameworks and standards including ISO 27001/27002, NIST, CIS Controls, PCI-DSS and Cyber Essentials Plus . Experience developing and maintaining security policies and procedures. Experience with third-party/vendor risk management ...

Information Security Architecture & Engineering Lead (UK-based) The Information Security Architecture & Engineering Lead forms the technical heart of PCI Pal’s Information Security function. The role owns cloud architecture review, DevSecOps and secure SDLC practice, security automation and tooling, and security architecture strategy for the organisation, replacing reactive, post … secure coding practices. Experience threat-modelling applications and cloud workloads at the design stage, not just reviewing them after deployment. Working knowledge of PCI DSS v4.0.1. ISO/IEC 27001:2022; familiarity with ISO/IEC 42001:2023 is an advantage. Experience triaging and remediating findings from ...

Design and maintain enterprise security architecture aligned with business objectives and government security frameworks. Ensure compliance with security standards and regulations including ISO 27001 , PCI DSS , GDPR , GovAssure , NCSC Cyber Assessment Framework , and Secure by Design principles. Develop and manage the security architecture compliance roadmap in collaboration with … external partners, and stakeholders to develop secure, resilient, and compliant solutions. Requirements Enterprise Security Architecture Cloud Security (Azure, Hybrid and On-Premises) ISO 27001 PCI DSS GDPR GovAssure Framework NCSC Cyber Assessment Framework (CAF) Secure by Design Governance, Risk and Compliance (GRC) Risk Assessment and Risk Management Identity ...

Foundations, establishing centralized monitoring and alerting (via Wiz/Security Hub). Data Privacy & Compliance End-to-End Privacy: Own the GDPR and PCI-DSS compliance programmes, embedding "Privacy by Design" and data minimization directly into our delivery processes. Legal Partnership: Collaborate with Legal to manage DPAs, transfer … information security, including leadership-level responsibility Proven experience building and scaling security and privacy programmes within growing organisations Strong hands-on knowledge of GDPR, PCI-DSS, incident response, and resilience planning Experience working within cloud-first environments, ideally AWS Strong understanding of security within e-commerce, fintech ...

Framework and other recognised standards. Maintain effective security policies, standards and controls, ensuring they are understood, embraced, evidenced and continuously improved. Support compliance with PCI DSS, UK GDPR, the Data Protection Act 2018 and relevant FCA expectations. Strengthen cyber operations and resilience Lead security monitoring, threat management, vulnerability … across security operations, governance, risk and compliance, architecture, engineering, third-party risk, assurance and operational resilience. Strong practical knowledge of ISO/IEC 27001, PCI DSS, UK GDPR, the Data Protection Act 2018 and recognised control frameworks such as NIST. A solid understanding of technology risk, risk appetite ...

enjoys balancing technical security requirements with governance, compliance, and stakeholder engagement. Key Responsibilities Manage and maintain compliance with security standards and accreditations including PCI DSS, ISO 27001, ISO 22301, Cyber Essentials Plus and IT Health Checks. Conduct internal audits, control reviews, and risk assessments. Maintain and monitor … years' experience in a Security Manager or similar information security role. Strong understanding of cyber security, governance, risk, and compliance frameworks. Extensive knowledge of PCI DSS, ISO 27001, Cyber Essentials Plus, and data protection requirements. Experience with Microsoft 365, Azure, AWS, vulnerability management, and SIEM tools. Strong communication ...

Drive continuous improvement of governance, risk and compliance (GRC) processes, reporting, automation and assurance activities. Support regulatory, internal and external audit requirements such as PCI -DSS, ensuring documentation and evidence are maintained to a high standard. Qualifications What we are looking for: 2+ years' experience within Technology Risk … multinational organisations. Knowledge of NIST Cybersecurity Framework, ISO 27001, COBIT and ITIL. Experience with data analytics, continuous controls monitoring or assurance automation. Familiarity with PCI DSS, SOX or other regulatory and compliance frameworks. Additional Information Along with your benefits package we also offer a wide range of perks ...

Drive continuous improvement of governance, risk and compliance (GRC) processes, reporting, automation and assurance activities. Support regulatory, internal and external audit requirements such as PCI -DSS, ensuring documentation and evidence are maintained to a high standard. Qualifications What we are looking for: 2+ years' experience within Technology Risk … multinational organisations. Knowledge of NIST Cybersecurity Framework, ISO 27001, COBIT and ITIL. Experience with data analytics, continuous controls monitoring or assurance automation. Familiarity with PCI DSS, SOX or other regulatory and compliance frameworks. Additional Information Along with your benefits package we also offer a wide range of perks ...

assessments and gap analyses, translating results into actionable remediation plans Support alignment and readiness activities for ISO 27001 and other relevant frameworks (e.g., PCI DSS, GLBA, state/federal financial regulations as applicable) Maintain a unified control framework that maps overlapping requirements across multiple standards to reduce duplicate … audits (as a practitioner preparing evidence, not just an auditor) Working knowledge of NIST CSF and ISO 27001 (or similar frameworks like PCI DSS, HITRUST) Experience with a GRC automation platform (Anecdotes, Vanta, Drata, Secureframe, OneTrust, ServiceNow GRC, or similar) Comfort working with API integrations to ingest data ...

technical levels, supporting board-level decision‐making while driving operational security improvements aligned to recognised standards such as NIST CSF, ISO 27001, DORA, PCI‐DSS, and MITRE ATT&CK. Reporting To: Director/Head of Cyber Security Location: London (Hybrid) Employment Type: Full‐Time Salary … OWASP Top 10). Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with ISO 27001. Ensure alignment with GDPR, PCI‐DSS, DORA, NIST CSF, COBIT, SANS, and related frameworks. Develop security policies, SOPs, and governance documentation. Conduct IT resilience and cloud security audits. ...

where some products are today outside the standard tooling. Governance, risk and compliance and vendor management Own ISO 27001, SOC 1, SOC 2 and PCI DSS compliance, the audit calendar, the compliance automation platform and the relationship with our auditors. Work with legal and the Data Protection Officer … facing those customers on security matters. Working knowledge of ISO 27001 and SOC 2, and experience of being accountable for audits and certifications. PCI DSS experience is an advantage. Practical understanding of cloud security on AWS and Azure, Kubernetes-based platforms, infrastructure as code and modern CI/ ...

Door and WAF Owning Entra ID, Conditional Access, PIM and RBAC, including joiner, mover and leaver automation with HR Leading the technical side of PCI DSS v4.0 compliance and NIST alignment, from controls and evidence through to audits Building automation with Logic Apps, Function Apps and PowerShell Securing … colleagues What you'll bring 5+ years' hands-on experience with Azure in production Strong Azure networking and Entra ID skills Experience working to PCI DSS, NIST, ISO 27001 or Cyber Essentials Plus Confident PowerShell scripting The ability to explain technical risk in plain English It would ...

governance. Key responsibilities include: Managing and enhancing cyber security governance and compliance frameworks. Owning and developing the organisation's GRC platform. Leading PCI DSS compliance activities and supporting audit requirements. Managing supplier security assurance and third-party risk assessments. Advising projects and stakeholders on cyber security and compliance … requirements. Supporting frameworks and standards including ISO 27001, ISO 42001, NIST, CAF, CIS Benchmarks and PCI DSS. Producing meaningful risk and compliance reporting for senior stakeholders. Supporting governance activities around AI, Purview and other strategic technology initiatives. We're keen to speak with cyber security, risk, governance and compliance ...

Information Security GRC Analyst (UK-based) The GRC Analyst strengthens PCI Pal's central Information Security function by providing structured governance, risk and compliance analysis across audit, assurance, control management and strategic change. The role turns requirements, evidence, risks and delivery updates into accurate, traceable information that supports timely … requirements Relevant experience in GRC, information security compliance, risk management, internal audit or assurance. Working knowledge of at least one major framework, such as PCI DSS, ISO/IEC 27001, SOC 2 or NIST CSF, with the ability to apply requirements in practice. Experience reviewing policies, audit reports ...

security investigations and overseeing remediation after incidents or identified risks Driving compliance with security policies, standards and regulations, including ISO 27001, Cyber Essentials and PCI-DSS Managing security audits, risk assessments and improvement plans Delivering security reporting, metrics and risk updates to senior stakeholders and governance forums Working … response, risk management and security governance Experience developing and implementing security policies, controls and improvement programmes A strong understanding of ISO:27001, Cyber Essentials, PCI-DSS and wider security best practice Excellent stakeholder management and communication skills, and the ability to influence at all levels Experience leading teams ...

effectiveness of information security controls and identify opportunities for improvement. Apply recognised security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, PCI-DSS, and other relevant best practices in a proportionate and risk-based manner. Liaise with Cyber Security, IT, Business Continuity, Data Protection, Risk, Compliance … risk assessments, control reviews, audits, or assurance activities. Technical knowledge of information security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, DORA, PCI-DSS, and related security practices. Strong communicator with positive influencing and interpersonal skills. Ability to synthesise complex technical and business information and present ...

production readiness.Be the field's authority on our compliance posture — SOC 2 Type II, ISO 27001, GDPR and EU data residency, HIPAA, PCI DSS, and the European regulatory picture including DORA and NIS2.Raise the quality and speed of security questionnaires, RFP security sections, DPIAs, and third-party risk … network isolation, secure multi-tenancy, threat modelling, and audit.Working command of the frameworks that gate enterprise data deals — SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS — and comfort with EU regulation.Credibility with security buyers. You've held your own in front of a CISO and know the difference ...

production readiness. Be the field's authority on our compliance posture - SOC 2 Type II, ISO 27001, GDPR and EU data residency, HIPAA, PCI DSS , and the European regulatory picture including DORA and NIS2. Raise the quality and speed of security questionnaires, RFP security sections, DPIAs, and third … isolation, secure multi-tenancy, threat modelling, and audit. Working command of the frameworks that gate enterprise data deals - SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS - and comfort with EU regulation. Credibility with security buyers. You've held your own in front of a CISO and know ...

using Databricks, Snowflake, ETL pipelines, and Big Data tools. Champion Data Governance practices including classification, cataloging, and lineage. Ensure compliance with ISO 27001, GDPR, PCI DSS, and other security standards. Embed DevSecOps principles into CI/CD pipelines and platform delivery. Produce High-Level and Low-Level Designs … teams for seamless integration. Support business development initiatives, contributing to bids and proposals. Business Analysis experience and stakeholder engagement skills. Security - ISO 27001, GDPR, PCI DSS, IDAM, DevSecOps Agile - SAFe, DevOps, Scrum Collaboration - Stakeholder Engagement, Governance, Team Mentoring Business - Business Analysis, Bid Support, Multi-sector Delivery Upon employment ...

capability and lead the response to incidents and suspected data breaches. Lead the business to Cyber Essentials Plus and towards ISO 27001 readiness, maintaining PCI DSS and supporting UK GDPR compliance. Write and own our security, acceptable use and AI usage policies, and run security‐awareness training across … incident response, including real incidents. Evidence of building with AI and automation, with comfort in scripting (Python, TypeScript, shell) and APIs. Working knowledge of PCI DSS and UK GDPR. Strong communication skills and the confidence to challenge decisions where there is genuine risk. Desirable Experience in ecommerce ...

internal security requirements and external commitments, including certification and regulatory requirements. Provide subject matter expertise in the application of established standards such as NIST, PCI-DSS, GDPR, COBIT, ISO 27001 and Cyber Essentials to current and future programs of work. Prepare for and support internal and external compliance … governance across the company. Qualifications One of the risk or security certifications (CISSP, CRISC, CISM). Good knowledge and practical experience of NIST, PCI-DSS, GDPR, COBIT, ISO 27001 or Cyber Essentials. Previous experience in a similar role with the ability to work in a dynamic and changing ...

reduction in the number of suppliers (where appropriate) we are using across your product suite. Operational Excellence & Compliance Ensure all payment processes are PCI DSS, GDPR, Card Scheme and legally compliant, working closely with InfoSec, Legal, and Risk functions. Ensure any use of AI is compliant with internal … integration experience. Strong stakeholder management, communication and influencing skills at all levels. Commercial experience managing payment costs, reconciliation and fraud metrics. Working knowledge of PCI DSS, PSD2, SCA and data protection requirements. Agile/Scrum delivery experience focused on value. Experience setting KPIs and targets. Confident influencing senior ...

network capacity and performance, manage resource utilisation efficiently, and conduct thorough cost analytics to identify optimisation opportunities.**What you will be doing:*** Ensure PCI DSS compliance and implement best practices such as the latest encryption, access control, documentation and patching to maintain the highest level of security.* Collaborate … using AWS tools and services.* Certifications in relevant technologies: Possession of industry certifications to validate expertise.* Experience with compliance and security standards: Familiarity with PCI DSS and other relevant security frameworks to ensure the infrastructure meets regulatory requirements and best practices.* Strong problem-solving collaboration and incident management ...

teams, and DPOs to understand their security requirements and design solutions that meet European regulatory standards (GDPR, EU AI Act, DORA, NIS2, SOC 2, PCI-DSS, and national regulator expectations). Lead technical deep-dives on network architecture, EU data residency, data retention and Zero Data Retention … applies to foundation models. Experience navigating compliance frameworks relevant to European financial services and insurance (DORA, NIS2, SOC 2, PCI-DSS, and national regulators' guidance on AI/ML such as FCA/PRA, BaFin, ACPR, FINMA). A track record of leading complex, high‐stakes engagements with ...