PCI DSS & GRC Infosec Manager – PCI Compliance Lead

Travis Perkins plc; Northampton; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Bonus

Pension scheme

Private medical insurance

Life Insurance

Colleague discount (Group businesses)

Job summary

Travis Perkins plc is seeking a Governance, Risk, and Compliance Infosec Manager (PCI) to join our central Information Security team in the UK. The role leads PCI DSS programme delivery, QSA engagement and cross‑functional security governance.

Hybrid working pattern with one day per week at the Northampton Head Office; full-time Monday to Friday. You will partner with business teams, suppliers, and IT to ensure secure change across the Group.

Qualifications

• Relevant GRC/InfoSec experience focused on PCI DSS and third‑party risk.
• Experience engaging with QSA teams and external auditors.
• In-depth knowledge of PCI DSS, NIST CSF, ISO 27001 and privacy frameworks.

Responsibilities

• Lead end-to-end PCI DSS programme across the Group, including scoping, evidence collection, and annual certification.
• Manage QSA relationships and external assessments.
• Assess third‑party security controls and supply chain risk.
• Support IT risk assessments and maintain risk registers.
• Develop and maintain information security policies and onboarding training content.
• Partner with business teams to enable secure change initiatives.

Skills

GRC governance

PCI DSS

Third-party risk management

Cloud security

Stakeholder engagement

Communication

Education

Higher education in Cybersecurity/InfoSec

Job description

Travis Perkins plc is seeking a Governance, Risk, and Compliance Infosec Manager (PCI) to join our central Information Security team in the UK. The role leads PCI DSS programme delivery, QSA engagement and cross‑functional security governance.

Hybrid working pattern with one day per week at the Northampton Head Office; full-time Monday to Friday. You will partner with business teams, suppliers, and IT to ensure secure change across the Group.