IT PCI-DSS Security Manager

Marshall Wolfe; Luton; On-site; GBP 90,000 - 120,000; Full time

Job summary

Marshall Wolfe is seeking an IT PCI-DSS Security Manager to own the organisation's PCI-DSS compliance and drive cyber security strategy from operational to strategic levels. The role is based near Luton, UK, requiring hands-on leadership and direct collaboration with senior stakeholders and external auditors.

You will lead governance, risk and compliance activities, manage security incidents and oversee vulnerability remediation, while promoting security awareness across the business.

Qualifications

• Proven IT or Cyber Security experience with ownership of PCI-DSS in a Tier 1 environment.
• Strong understanding of security frameworks, controls and governance practices.
• Experience managing security incidents, vulnerability remediation and audit activities.
• Ability to engage confidently with senior stakeholders and external auditors.
• Industry certifications (CISSP, CISM, CISA, PCI ISA) are highly desirable.
• Knowledge of Azure, AWS and modern SOC/SIEM technologies.
• Experience in highly regulated environments (retail, hospitality, payments) is advantageous.

Responsibilities

• Develop and continuously improve the organisation's cyber security strategy, controls and policies.
• Monitor threats and protect endpoints, networks, cloud and identity environments.
• Lead incident response activities, investigations and remediation efforts.
• Drive vulnerability management and penetration testing programmes to resolution.
• Act as the internal cyber security subject matter expert.

Skills

IT/Cyber security

PCI-DSS

Stakeholder engagement

Incident response

Vulnerability management

Audits & compliance

Security frameworks & governance

Cloud security (Azure/AWS)

Education

Industry certifications (CISSP/CISM/CISA/PCI ISA)

Tools

Azure

AWS

SOC/SIEM technologies

Job description

IT PCI-DSS Security Manager – Cyber Security

**Applicants must hold full working rights to work in the UK**

Our client, a national organisation with offices near Luton, are seeking an experienced IT Security Manager to lead and enhance their security landscape while owning their Tier 1 PCI-DSS compliance programme. This is a fantastic opportunity for a hands-on security specialist who enjoys operating at both strategic and technical levels, working closely with senior stakeholders to drive security best practice across the organisation.

Reporting to the Head of Technical Delivery, you will be the go-to expert for all aspects of cyber security, governance, risk, and compliance. This is a standalone role offering significant ownership and influence, making it ideal for someone who enjoys autonomy and genuinely shaping an organisation's security strategy.

Key Responsibilities

Cyber Security:

• Develop and continuously improve the organisation's cyber security strategy, controls, and policies.
• Monitor emerging threats and ensure effective protection across endpoint, network, cloud, and identity environments.
• Lead security incident response activities, investigations, and remediation efforts.
• Drive vulnerability management and penetration testing programmes through to successful resolution.
• Act as the internal cyber security subject matter expert.

PCI-DSS Compliance & Audit:

• Take ownership of end-to-end PCI-DSS compliance activities.
• Lead annual audit and attestation processes, working closely with external assessors.
• Manage compliance documentation, evidence gathering, and control frameworks.
• Coordinate with technical and business teams to embed compliance requirements into day-to-day operations.
• Provide compliance reporting and updates to senior stakeholders.
• Support wider compliance initiatives including ISO 27001, Cyber Essentials, and GDPR.
• Maintain security policies, standards, and procedures.
• Conduct risk assessments and manage the security risk register.
• Deliver security awareness initiatives across the business.
• Manage relationships with third-party suppliers, security vendors, and auditors.
• Proven experience within IT or Cyber Security with ownership of PCI-DSS compliance in a Tier 1 environment.
• Strong understanding of security frameworks, controls, and governance practices.
• Experience managing security incidents, vulnerability remediation, and audit activities.
• Ability to engage confidently with senior stakeholders and external auditors.
• Comfortable working independently and taking ownership of a broad security remit.
• CISSP, CISM, CISA, PCI ISA, or similar industry certifications.
• Experience within retail, hospitality, payments, or other highly regulated environments.
• Knowledge of Azure, AWS, and modern SOC/SIEM technologies.