Security Compliance Lead — PCI DSS Expert

Virgin Media O2; Reading; On-site; GBP 90,000 - 120,000; Full time

Job summary

Virgin Media O2 is seeking a Security Compliance Manager to safeguard information assets and payment environments. You will drive PCI DSS v4.01 compliance, develop robust controls, and ensure evidence-driven assurance.

The role combines detective work with strategic compliance leadership in a flexible, collaborative team. Your work will include aligning controls to PCI obligations, supporting audits, and maintaining security best practices across networks, encryption, and IAM domains in a

Qualifications

• Proven hands-on experience supporting PCI DSS assessments, including ROC activity and assessor engagement.
• Deep, practical understanding of PCI DSS v4.01 requirements and how they apply within real‑world payment environments.
• Ability to interpret, validate, and map technical and procedural controls to PCI obligations.
• Experience in information security, governance, risk, or compliance roles.
• Experience maintaining controls aligned to ISO 27001 and Cyber Essentials.
• Proven track record delivering or supporting audits with clear evidence and timely follow‑up on findings.
• Robust knowledge of network security and segmentation, with secure design principles.
• Understanding of OS and application hardening, and industry benchmarks.
• Knowledge of encryption and key management, including secure handling lifecycle.
• Good grasp of IAM, authentication, access control models, and privileged access.

Skills

PCI DSS assessments

PCI DSS v4.01

Information security governance

Risk management

Audits & evidence

Network security

Encryption & key management

Identity & access management

ISO 27001

Cyber Essentials

Secure design principles

Job description

Virgin Media O2 is seeking a Security Compliance Manager to safeguard information assets and payment environments. You will drive PCI DSS v4.01 compliance, develop robust controls, and ensure evidence-driven assurance.

The role combines detective work with strategic compliance leadership in a flexible, collaborative team. Your work will include aligning controls to PCI obligations, supporting audits, and maintaining security best practices across networks, encryption, and IAM domains in a