IT Security Manager

Moto; Fancott; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Up to 20% bonus

25 days holiday

Exclusive discounts

Enhanced maternity, paternity, pension

Life assurance & sick pay

Fantastic training opportunities

Job summary

Moto, one of the UK's biggest motorway service operators, seeks an IT Security Manager to own our cyber security program and drive PCI-DSS compliance. This hands-on role offers hybrid working with 2 days in our Toddington office or visiting sites, shaping security across infrastructure and elevating risk management.

You will engage senior stakeholders, lead audits and awareness initiatives, and deliver practical security improvements to protect our people and customers.

Qualifications

• Significant IT/cyber security experience with PCI-DSS ownership.
• Strong knowledge of security frameworks and controls.
• Experience leading incident response and remediation efforts.

Responsibilities

• Lead and continuously improve Moto's cyber security strategy, policies and controls.
• Monitor emerging threats and ensure effective security measures across our infrastructure and systems.
• Own security incident response activities, from investigation through to remediation.
• Manage vulnerability assessments and penetration testing programmes.
• Lead our Tier 1 PCI-DSS compliance programme and annual audit process.
• Act as the key contact for auditors and assessors.
• Maintain security documentation, evidence and compliance records.
• Conduct risk assessments and manage the security risk register.
• Deliver security awareness initiatives across the business.
• Manage relationships with third-party suppliers, auditors and security partners.

Skills

PCI-DSS compliance ownership

Security frameworks & controls

Incident & remediation management

Stakeholder engagement

Risk-based decision making

Independent ownership

Education

CISSP/CISM/CISA or similar certifications

Job description

IT Security Manager
Competitive salary
37.5 hours per week
Hybrid – 2 days in our Toddington office or out visiting sites

Ready to take ownership of security for one of the UK's biggest motorway service operators?

At Moto, we're committed to keeping our business, customers and colleagues safe. As our IT Security Manager, you'll be at the heart of protecting our organisation from evolving cyber threats while leading our PCI-DSS compliance programme and driving security best practice across the business.

This is a hands-on role where you'll have the autonomy to shape our security landscape, influence senior stakeholders, and make a tangible impact on how we manage cyber risk and compliance.

Why Join Us?

• Bonus: Up to 20% bonus
  Time off: 25 days holiday
  Exclusive discounts: Up to 60% off for you, your partner, and loved ones
  Inclusive benefits: Enhanced maternity, paternity, pension, sick pay & life assurance
  Career development: Fantastic training opportunities, including funding for qualifications

Your Responsibilities

• Lead and continuously improve Moto's cyber security strategy, policies and controls.
• Monitor emerging threats and ensure effective security measures are in place across our infrastructure and systems.
• Own security incident response activities, from investigation through to remediation.
• Manage vulnerability assessments and penetration testing programmes.
• Lead our Tier 1 PCI-DSS compliance programme and annual audit process.
• Act as the key contact for auditors and assessors.
• Maintain security documentation, evidence and compliance records.
• Conduct risk assessments and manage the security risk register.
• Deliver security awareness initiatives across the business.
• Manage relationships with third-party suppliers, auditors and security partners.

What You’ll Bring

We're looking for someone who combines technical expertise with the ability to engage and influence stakeholders across the business.

You’ll have:

• Significant experience in IT or Cyber Security with direct ownership of PCI-DSS compliance.
• Strong knowledge of security frameworks and controls.
• Experience managing security incidents, vulnerabilities and remediation programmes.
• Confidence working with senior stakeholders and external auditors.
• The ability to work independently and take ownership of a broad security remit.
• A practical, solutions-focused approach to managing risk while enabling business objectives.

It Would Be Great If You Also Have:

• CISSP, CISM, CISA or similar security certifications.
• Experience within retail, hospitality or payments environments.
• Knowledge of cloud security technologies and modern security monitoring tools.

Why Moto?

Moto is the UK's leading motorway services operator, serving millions of customers every year. Behind the scenes, our technology teams play a vital role in keeping our operations running smoothly, securely and efficiently.

Joining Moto means becoming part of a business that's investing in technology, security and innovation. You'll have the opportunity to lead key security initiatives, work with a wide range of stakeholders, and make a meaningful contribution to the future of the business.

INDCS