Payment Security Engineer

Pay.UK; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Non-contributory pension

Discretionary annual bonus

30 days annual leave

Cycle to Work Scheme

Season ticket loan

Annual fitness subsidy

Job summary

Pay.UK is seeking a Payment Security Engineer to apply specialist knowledge in payment security, cryptography and security architecture across UK interbank payment services. You will influence secure design, assurance and resilience within a regulated environment.

You will work across the full lifecycle of payment services, defining cryptographic controls, key management and security requirements, ensuring watershed security across schemes such as Bacs and FPS.

Qualifications

• Degree in Cyber Security, Information Security, Computer Science or related field (or equivalent).
• Professional information security qualification such as CISSP, CISM, CISMP, CCSP or equivalent.

Responsibilities

• Review and secure payment infrastructure, services and changes for risks and gaps.
• Provide security guidance during design, development, and operation of payment systems.
• Assess security architectures against Pay.UK requirements and industry best practices.
• Advise on cryptographic controls, authentication, encryption standards, PKI and key lifecycle.
• Evaluate cryptographic controls used by suppliers and participants where appropriate.
• Contribute to security assessments, risk reviews and assurance activities for payment services.
• Develop and maintain security requirements, standards and guidance for payment systems.
• Monitor emerging threats, regulatory developments and cryptographic risk.

Skills

Security architecture

Risk assessment

Security assurance

Cryptography

PKI

Key management

Familiar with BACS/FPS schemes

Security governance

Education

Degree in Cyber Security / Information Security / Computer Science or related

Job description

Payment Security Engineer, 12 Months Fixed Term Contract

As a Payment Security Engineer at Pay.UK, you will apply specialist knowledge in payment security, cryptography and security architecture to services that support the UK’s interbank payment systems. This role offers broad technical scope across existing payment schemes, future service developments and security standards, with a clear focus on secure design, assurance and resilience.

You’ll work across the full lifecycle of payment services, helping ensure that security requirements, cryptographic controls and key management practices are defined, reviewed and maintained in a complex, regulated environment. If you’re looking for a role where deep technical knowledge is central to the work, this is a chance to support infrastructure that underpins payments used every day across the UK.

Accountabilities

• Review payment infrastructure, service and technology changes to identify security risks, control gaps and required improvements.
• Provide security guidance during the design, development, implementation and operation of payment systems and services.
• Assess security architectures and design proposals against Pay.UK requirements, security principles and industry good practice.
• Advise on cryptographic controls, authentication mechanisms, encryption standards, PKI and key lifecycle management.
• Evaluate cryptographic controls used by suppliers, service providers and participants where appropriate.
• Contribute to security assessments, risk reviews and assurance activities for payment services and supporting technologies.
• Develop and maintain security requirements, standards, guidance and related artefacts for payment systems and supporting services.
• Monitor emerging threats, vulnerabilities, technologies and regulatory developments relevant to payment security and cryptographic risk.

Qualifications, Skills and Experience

• Degree in Cyber Security, Information Security, Computer Science, Engineering or a related discipline, or equivalent professional experience.
• Professional information security qualification such as CISSP, CISM, CISMP, CCSP or equivalent.
• Extensive experience in cyber or information security, including security architecture, risk assessment and security assurance.
• Extensive practical knowledge of cryptography, encryption technologies, authentication mechanisms, PKI, and key management practices.
• Experience designing, reviewing and assuring secure technology solutions in complex or highly regulated environments, and communicating security risks to technical and non-technical stakeholders.
• Understanding of BACS and Faster Payments (FPS) schemes or similar.

Pay.UK Behaviours

At Pay.UK, our behaviours are central to who we are and how we operate. They bring our values to life, shape our culture, and guide how we make decisions, collaborate, and respond to challenges across the payments ecosystem. All interview processes will assess the following behaviours:

• Listen to Find Win-Wins - Empathy, Listening and Understanding
• Influence with Courage - Influence, Courage
• Go Horizontal First - Cross Boundary Collaboration
• Take Ownership - Self Development
• Opportunity Mindset - Initiative
• Simplify - Achievement Orientation

In addition, all leadership roles are expected to lead by example through the following behaviours:

• Set Direction - Strategic Planning, Team leadership
• Hold Colleagues to Account - Accountability
• Coach & Grow Your Colleagues - Develop Others

Inclusivity

At Pay.UK, we value diversity and inclusivity. Research has shown that candidates from underrepresented groups may hesitate to apply unless they meet all the requirements listed. We encourage all qualified candidates to apply, regardless of how closely their skills and experience match the requirements. We are committed to supporting accessibility needs and creating a welcoming environment for all employees. Become part of our team and contribute to the creation of an inclusive work environment that values everyone's unique input.

Who we are

Pay.UK is the recognised operator and standards body for the UK's interbank retail payment systems. We provide the infrastructure and services that millions of people and businesses rely on every day, including Bacs, Faster Payments and the Image Clearing System for cheques, the Current Account Switch Service and Confirmation of Payee. Together, these services help keep money moving safely, securely and reliably across the UK and play an important role in supporting the economy.

In 2025, the UK's retail payment systems processed more than 12.5 billion transactions worth over £11 trillion. Since its launch in 2013, the Current Account Switch Service has successfully helped consumers and businesses switch more than 12 million current accounts. These services help people receive their salaries, pay their bills, make payments and manage their finances with confidence.

Our purpose is to provide the trusted infrastructure, standards and services that underpin UK retail payments. We deliver safe, resilient and efficient payment systems while working collaboratively with industry, regulators and stakeholders to strengthen resilience, tackle fraud, improve access and support innovation across the payments landscape. As the ecosystem evolves, we are continuing to develop our capabilities in areas such as data and AI, enhancing operational insight and helping to build a modern, trusted payments ecosystem.

• 12% Non-contributory pension
• Discretionary annual bonus
• 30 days annual leave (excluding bank holidays)
• Employee assistance programme
• Cycle to Work Scheme
• Season ticket loan
• Annual fitness subsidy of up to £500 per annum

Please note:

• Working from home policy - minimum 40% in the office (eg. 2 days in the office over a 5 day working week)
• Some of our benefits are only available to colleagues upon completion of the probationary period