PCI Manager

Vodafone Group Plc; Newbury; On-site; GBP 120,000 - 170,000; Full time

Benefits offered by this job

Yearly bonus 10%

Annual leave 28 days

Charity days

Maternity leave

Pension with Vodafone matching

Private medical

Private dental

Health assessments

Share save scheme

Consumer discounts

Job summary

Vodafone is seeking a Senior Leader to direct its PCI DSS compliance programme across products, cloud and data centres. You will own audit readiness, governance, supplier oversight and ongoing control validation to sustain certified compliance.

The role requires strategic leadership to drive compliance at scale, manage budgets, and coordinate with internal and external stakeholders in a global organisation.

Qualifications

• Strong working knowledge of PCI DSS and translating requirements into controls and audit evidence.
• Proven experience managing compliance, audit, assurance or governance programmes across complex environments.
• Ability to assess PCI scope across products, suppliers, cloud and data centres.

Responsibilities

• Lead the PCI DSS compliance programme, including planning, audit engagement and gap closure.
• Own the BAU PCI control activities and ensure evidence is tracked and current.
• Review compliance evidence from scans, access reviews, and supplier records.
• Manage PCI scope, supplier governance and artefacts, including attestations of compliance.
• Oversee stakeholder engagement and annual programme expenditure around PCI activities.

Skills

PCI DSS expertise

Audit governance

Stakeholder management

Budget & governance

PCI scope assessment

Job description

Join Us

At Vodafone, we’re not just shaping the future of connectivity for our customers – we’re shaping the future for everyone who joins our team. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact.

What you’ll do

A Senior Leader role responsible for leading Vodafone's PCI DSS compliance programme across in-scope products, services, suppliers, cloud environments and data centre operations. The role provides end-to-end accountability for PCI governance, audit readiness, compliance assurance, supplier oversight, operational control reviews, risk management and regulatory compliance activities. Acting as the primary authority for PCI DSS within Vodafone Group, the role owns the annual compliance roadmap, audit strategy, control validation approach and ongoing compliance operating model that supports continuous certification and assurance across the organisation.

The role requires strong expertise in PCI DSS, governance and assurance, coupled with the leadership capability to drive compliance at scale, challenge control weaknesses, manage supplier obligations, oversee significant programme expenditure and maintain trusted relationships with internal and external stakeholders.

• Lead the PCI DSS compliance programme, including annual assessment planning, QSA engagement, evidence coordination, audit preparation and follow-up of audit gaps or control improvements.
• Own the BAU compliance model, ensuring monthly, quarterly, semi-annual and annual PCI control activities are tracked, evidenced and aligned to current PCI DSS requirements.
• Review operational compliance evidence, including wireless scanning results, JML access reviews, ASV scan results, HLD / architecture changes, MORs, TRA outputs and supplier compliance evidence.
• Manage PCI scope, supplier assurance and governance documentation, including service provider records, Attestations of Compliance, responsibility matrices, process documents, training records and audit artefacts.
• Manage stakeholder engagement, PCI awareness activity, incident response governance input and approximately £300k annual PCI programme expenditure across audit, assurance, supplier and compliance activities.

Who you are

• Strong working knowledge of PCI DSS and practical experience translating compliance requirements into operational controls and audit-ready evidence.
• Proven experience managing compliance, audit, assurance or governance programmes across complex technology, supplier and operational environments.
• Ability to assess PCI scope impact across products, suppliers, architecture changes, cloud, data centre and payment-enabled service environments.
• Strong stakeholder management and communication skills, with the ability to influence technical and non-technical teams and coordinate external audit activity.
• Commercially aware and highly organised, with experience managing budget, suppliers, governance documentation, reporting, risks, actions and compliance deadlines.

Not a perfect fit?

Worried that you don’t meet all the desired criteria exactly? At Vodafone we are passionate about empowering people and creating a workplace where everyone can thrive, whatever their personal or professional background. If you’re excited about this role but your experience doesn’t align exactly with every part of the job description, we encourage you to still apply as you may be the right candidate for this role or another opportunity.

What's in it for you

• Yearly bonus: 10%
• Annual leave: 28 days + bank holidays + the opportunity to buy/sell/carry over 5 days/year
• Charity days: 5 days/year
• Maternity leave: 52 weeks: the first 13 weeks are fully paid, followed by 26 weeks of half pay
• Private pension: You can contribute up to 5% of your basic pay with 2:1 matching from Vodafone up to 10%.
• Access to: private medical, private dental, free health assessments, share save scheme
• Additional discounts: Vodafone retail, gym, cinema, cycle to work, season ticket loan

Who we are

We are a leading international Telco, serving millions of customers. At Vodafone, we believe that connectivity is a force for good. If we use it for the things that really matter, it can improve people's lives and the world around us. Through our technology we empower people, connecting everyone regardless of who they are or where they live and we protect the planet, whilst helping our customers do the same.

Belonging at Vodafone isn't a concept; it's lived, breathed, and cultivated through everything we do. You'll be part of a global and diverse community, with many different minds, abilities, backgrounds and cultures. ;We're committed to increase diversity, ensure equal representation, and make Vodafone a place everyone feels safe, valued and included.

If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, please refer to https://careers.vodafone.com/application-adjustments/ for guidance.

Together we can.