Information Security & GRC Specialist

Vix Technology; Manchester; On-site; GBP 60,000 - 85,000; Full time

Benefits offered by this job

25 days holiday plus 8 bank holidays

Pension Scheme

Health Insurance

Employee Assistance Program

Death in Service and Life Assurance

Cycle Scheme

EV Car Scheme

Discounts platform

Long Service Awards

Referral Bonus

Job summary

Vix Technology is seeking a proactive Information Security Specialist to own and continually improve our ISMS. You will coordinate ISO 27001 activities, prepare for audits, manage evidence and drive remediation actions across Security, Engineering and the wider business.

You will interact with stakeholders to translate security requirements into practical actions, support PCI DSS and related frameworks, and help advance our governance, risk and compliance program while keeping security culture

Qualifications

• Practical ISO 27001 ISMS experience including audit prep and remediation.
• Knowledge of information security governance, risk and compliance.
• Clear communication of security requirements across technical and non-technical teams.
• Certifications such as CISA/CRISC/CISSP are welcome but not essential.

Responsibilities

• Own day-to-day coordination and continuous improvement of ISMS.
• Support ISO 27001 certification, surveillance and internal audits.
• Coordinate audit evidence and close findings with stakeholders.
• Maintain security policies, controls and compliance documentation.
• Support PCI DSS and broader security assurance activities.
• Track compliance status, risks, upcoming audits and outstanding actions.
• Help develop ISO 27017/27018/22301 approach.

Skills

ISO 27001 knowledge

ISMS experience

Audit preparation

Evidence management

Regulatory requirements

PCI DSS familiarity

Tools

PCI DSS

Job description

About Us

At Vix Technology, we're bringing people, technology and services together to make transport work better for everyone. Operating across international markets, we connect and simplify complex transport systems, giving operators the clarity, control and confidence to run better mobility and create simpler, more connected experiences for passengers.

About Us

At Vix Technology, we're bringing people, technology and services together to make transport work better for everyone. Operating across international markets, we connect and simplify complex transport systems, giving operators the clarity, control and confidence to run better mobility and create simpler, more connected experiences for passengers. Our goal is simple: better systems, better outcomes and transport that works as one. It's our people who make that possible. We value those who take ownership, work well with others and aren't afraid to question the default. You'll have the opportunity to contribute your expertise, solve meaningful challenges and work alongside people who share your ambition to build great solutions and make a difference.

The Opportunity

You'll take day-to-day ownership of our Information Security Management System (ISMS), helping ensure Vix remains compliant, audit-ready and continually improving. Working across Security, Engineering, Technology and the wider business, you'll coordinate ISO 27001 activities, prepare for internal and external audits, manage evidence and help drive remediation actions through to completion. You'll also gain exposure to PCI DSS and wider security frameworks, supporting customer assessments, regulatory requirements and security assurance activities. This isn't a role where you'll simply identify gaps and write reports. We want someone who can build relationships across the business, translate security requirements into practical actions and help get things fixed.

What You'll Be Doing

• Own the day-to-day coordination and continuous improvement of our ISMS.
• Support ISO 27001 certification, surveillance and internal audits.
• Coordinate audit evidence and work with stakeholders to close findings and remediation actions.
• Maintain security policies, procedures, controls and compliance documentation.
• Support PCI DSS and wider security compliance and assurance activities.
• Track and report on compliance status, risks, upcoming audits and outstanding actions.
• Help develop our approach across ISO 27017, ISO 27018 and ISO 22301.

About You

You'll have practical experience working with ISO 27001 and an ISMS, ideally including audit preparation, evidence management and remediation. You'll understand information security governance, risk and compliance and be confident working with both technical and non-technical teams. You'll be organised, pragmatic and comfortable taking ownership. Just as importantly, you'll be able to explain security requirements clearly and build relationships with the people responsible for implementing them. Experience with PCI DSS, security audits, ISO 27017/27018/22301 or working within a regulated technology environment would be a bonus. Qualifications such as ISO 27001 Lead Implementer/Auditor, CISA, CRISC or CISSP are welcome, but they're not essential.

Why Vix?

You’ll work on security that has genuine real-world impact, protecting technology behind public transport and payment systems used by millions of passengers. You’ll join an international security organisation, work with colleagues around the world and build your experience across GRC, ISO 27001, PCI DSS, risk, audit and assurance. If you're looking for a role where you can take ownership, continue developing and make a visible difference to how security is managed, we'd love to hear from you. Make the Connection. Help Keep the Technology That Moves People Secure.

What We Offer

Join Vix Technology and be part of a global team making transport work better. You’ll work with talented people to solve real-world challenges in a culture that values collaboration, ownership, fresh thinking and putting customers first. Alongside this, we offer a range of benefits designed to support you at work and beyond.

• 25 days holiday plus 8 bank holidays
• Pension Scheme
• Health Insurance
• Employee Assistance Program
• Death in Service and Life Assurance schemes
• Cycle Scheme
• EV Car Scheme
• Discounts platform
• Long Service Awards
• Referral Bonus

Equal Opportunities

Vix Technology is committed to a workplace where everyone is treated with dignity, respect, fairness and inclusion. We value diversity of background, experience and perspective and are committed to equal opportunity, with employment decisions based on merit. If you need an adjustment or support at any stage of the recruitment process, please let us know. No applications from agencies, please! Any introductions will be considered gifts.