IT Security Manager

Moto; Dunstable; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Bonus up to 20%

25 days holiday

Exclusive discounts: up to 60% off for

Enhanced maternity, pension, sick pay

Fantastic training opportunities

Job summary

Moto is the UK's leading motorway services operator, serving millions of customers every year. As IT Security Manager, you will own Moto's cyber security strategy, PCI-DSS compliance programme and security controls across the business.

This hands-on role offers autonomy to shape security, engage senior stakeholders and contribute to risk management while enjoying a hybrid work pattern and benefits.

Qualifications

• Significant experience in IT or cyber security with direct PCI-DSS ownership.
• Strong knowledge of security frameworks and controls.
• Experience leading security incidents and vulnerability remediation.
• Ability to engage with senior stakeholders and auditors.

Responsibilities

• Lead and continuously improve Moto's cyber security strategy, policies and controls.
• Monitor emerging threats and ensure effective security measures are in place across our infrastructure and systems.
• Own security incident response activities, from investigation through to remediation.
• Manage vulnerability assessments and penetration testing programmes.
• Lead our Tier 1 PCI-DSS compliance programme and annual audit process.
• Act as the key contact for auditors and assessors.
• Maintain security documentation, evidence and compliance records.
• Conduct risk assessments and manage the security risk register.
• Deliver security awareness initiatives across the business.
• Manage relationships with third-party suppliers, auditors and security partners.

Skills

PCI-DSS ownership

Security incident management

Vulnerability management

Threat monitoring

Risk management

Stakeholder engagement

Education

CISSP/CISM/CISA or similar certifications

Job description

IT Security Manager

Competitive salary

37.5 hours per week

Hybrid - 2 days in our Toddington office or out visiting sites

Ready to take ownership of security for one of the UK's biggest motorway service operators?

At Moto, we're committed to keeping our business, customers and colleagues safe. As our IT Security Manager, you'll be at the heart of protecting our organisation from evolving cyber threats while leading our PCI-DSS compliance programme and driving security best practice across the business.

This is a hands-on role where you'll have the autonomy to shape our security landscape, influence senior stakeholders, and make a tangible impact on how we manage cyber risk and compliance.

Why Join Us?

Bonus: Up to 20% bonus

Time off: 25 days holiday

Exclusive discounts: Up to 60% off for you, your partner, and loved ones

Inclusive benefits: Enhanced maternity, paternity, pension, sick pay & life assurance

Career development: Fantastic training opportunities, including funding for qualifications

Your Responsibilities

• Lead and continuously improve Moto's cyber security strategy, policies and controls.
• Monitor emerging threats and ensure effective security measures are in place across our infrastructure and systems.
• Own security incident response activities, from investigation through to remediation.
• Manage vulnerability assessments and penetration testing programmes.
• Lead our Tier 1 PCI-DSS compliance programme and annual audit process.
• Act as the key contact for auditors and assessors.
• Maintain security documentation, evidence and compliance records.
• Conduct risk assessments and manage the security risk register.
• Deliver security awareness initiatives across the business.
• Manage relationships with third-party suppliers, auditors and security partners.

What You'll Bring

We're looking for someone who combines technical expertise with the ability to engage and influence stakeholders across the business.

You’ll have:

• Significant experience in IT or Cyber Security with direct ownership of PCI-DSS compliance.
• Strong knowledge of security frameworks and controls.
• Experience managing security incidents, vulnerabilities and remediation programmes.
• Confidence working with senior stakeholders and external auditors.
• The ability to work independently and take ownership of a broad security remit.
• A practical, solutions-focused approach to managing risk while enabling business objectives.

It Would Be Great If You Also Have:

• CISSP, CISM, CISA or similar security certifications.
• Experience within retail, hospitality or payments environments.
• Knowledge of cloud security technologies and modern security monitoring tools.

Why Moto?

Moto is the UK's leading motorway services operator, serving millions of customers every year. Behind the scenes, our technology teams play a vital role in keeping our operations running smoothly, securely and efficiently.

Joining Moto means becoming part of a business that's investing in technology, security and innovation. You'll have the opportunity to lead key security initiatives, work with a wide range of stakeholders, and make a meaningful contribution to the future of the business.