PCI Compliance and Assurance Specialist

Paydock; United Kingdom; On-site; GBP 50,000 - 90,000; Full time

Job summary

Join an innovative fintech company transforming the payments landscape. As a PCI Compliance and Assurance Specialist, you'll lead the PCI DSS certification process, ensuring compliance while collaborating with cross-functional teams. This role offers the opportunity to work closely with leading financial institutions, tackle complex challenges, and contribute to a dynamic culture. Enjoy competitive compensation and flexible work arrangements in a fast-paced environment where your expertise will make a significant impact.

Benefits

Flexible work arrangements

Collaborative culture

Dynamic work environment

Competitive compensation

Qualifications

• Strong understanding of PCI DSS requirements and assessment processes.
• Experience with ISO 27001 and SOC 2 Type 2 certification processes.

Responsibilities

• Lead PCI DSS certification process including audits and evidence collection.
• Collaborate with teams to ensure compliance and security best practices.

Skills

PCI DSS

CISSP

CISM

CISA

CRISC

Security Architecture

Risk Assessments

Communication Skills

Education

ISA or QSA Certification

Other Security Certifications

Tools

Cloud Environments

Security Controls

Job description

DISCLAIMER: Applicants please apply direct to this post. We are not accepting resumes from agencies.

About Paydock

Paydock is a cutting-edge fintech company revolutionising the payments ecosystem. We enable businesses and financial institutions to streamline their payment operations, improve efficiency, and drive revenue growth through our innovative payment orchestration platform. As we expand our collaboration with financial institutions to deliver industry-leading financial products, we are seeking a Senior Client Executive to deepen our client relationships and accelerate the expansion of our market-leading product.

About the Role

We are seeking a PCI Compliance and Assurance Specialist to lead and manage our PCI DSS certification process, ensuring compliance with regulatory requirements and maintaining security controls throughout the year.

This role will be responsible for collecting evidence, assessing controls, and preparing for audits while also providing consultation on PCI requirements to Engineering, SecOps, and Architecture teams. Additionally, the role will support ISO 27001, SOC 2 Type 2, and other certification audits, assist with security assurance activities such as design reviews and client security questions, and collaborate with internal and external stakeholders to ensure compliance across the business.

The ideal candidate will have a strong technical background and experience working with multiple levels of stakeholders. A qualification as an ISA or QSA is desirable and would be beneficial in this role.

Report

The role will report into the Head of Information Security, Risk and Compliance

Responsibilities

• Lead and manage the annual PCI DSS certification process, including preparation, evidence collection, and assessments.
• Act as the primary point of contact for all PCI-related matters, working closely with both internal teams and external assessors.
• Monitor and assess PCI DSS controls and requirements, ensuring they are effectively implemented and maintained throughout the year.
• Work with Engineering, SecOps, and Architecture teams to provide PCI consultation and ensure security-by-design principles are followed.
• Conduct internal PCI assessments, gap analysis, and risk assessments to identify areas of improvement.
• Stay up to date with PCI DSS standard updates and ensure timely adaptation of new requirements.
• Manage and support ISO 27001 and SOC 2 Type 2 certification processes, ensuring evidence gathering, control validation, and audit preparation.
• Assist in responding to client security questionnaires and third-party risk assessments, design reviews, and due diligence requests related to security and compliance.
• Collaborate with internal teams to ensure alignment between business operations and compliance obligations.
• Provide ongoing assurance to the business regarding security controls and regulatory compliance.

Skills and Experience:

• Certifications: QSA (Qualified Security Assessor) or ISA (Internal Security Assessor) desirable but not required. Other security certifications such as CISSP, CISM, CISA, or CRISC are advantageous.
• Strong understanding of PCI DSS requirements, controls, and assessment processes.
• Hands-on experience with security controls, cloud environments, and security architecture.
• Experience with ISO 27001, SOC 2 Type 2, or other security frameworks.
• Proven ability to work effectively with senior leadership, auditors, external partners, and cross-functional teams.
• Experience with design reviews, risk assessments, and security best practices.
• Strong written and verbal communication skills to effectively articulate compliance requirements and security risks.
• Proactive mindset with the ability to identify gaps, drive remediation efforts, and enhance compliance posture.

Why Join Paydock?

• Be part of a fast-growing, dynamic fintech space, innovating payment solutions with global banks.
• Solve complex, innovative challenges in partnership with global teams
• Enjoy a flexible and dynamic culture at Paydock, where collaboration across teams creates a varied and engaging workday.
• Work closely with leading financial institutions on cutting-edge products.
• Opportunity to own the product marketing strategy for high-impact product launches.
• Competitive compensation, flexible work arrangements, and a collaborative culture.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

Referrals increase your chances of interviewing at Paydock by 2x

Sign in to set job alerts for “Compliance Specialist” roles.

Regulatory Compliance Specialist (FinTech, EMI)

London, England, United Kingdom 1 week ago

London, England, United Kingdom 1 month ago

Regulatory Compliance Manager (Quality Control)

Head of Compliance – Skills & Employability

Head of Compliance - ASF & Employability

Compliance Lead – Fraud Risk & Prevention – 6 months FTC – Remote or Hybrid – London

Product Compliance Specialist - Payments & Wallet

London, England, United Kingdom 4 days ago

London, England, United Kingdom 17 hours ago

Compliance Officer (Healthcare Recruitment)

Waltham Abbey, England, United Kingdom 3 months ago

Stonehouse, England, United Kingdom 1 week ago

Richmond Upon Thames, England, United Kingdom 5 days ago

Transaction Monitoring Investigations Global Lead

London, England, United Kingdom 2 weeks ago

Regulatory Manager / Senior Regulatory Manager

Interim Compliance Lead – Fraud Risk & Prevention – Day rate Inside IR35 – 6 months - Remote or Hybrid – London

Regulatory Compliance Manager (Wealth & Trading)

Quality Oversight and Compliance Manager

Tadworth, England, United Kingdom 6 days ago

Governance, Risk and Compliance (GRC) Specialist

Liverpool, England, United Kingdom 1 month ago

Regulatory Manager / Senior Regulatory Manager

Quality Oversight and Compliance Manager

Northern Ireland, United Kingdom 1 week ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.