Security Compliance Manager (PCI -DSS)

Burns Sheehan; London; On-site; GBP 100,000; Full time

Job summary

A rapidly growing payments technology company seeks a Security Compliance Manager to lead compliance initiatives, particularly around PCI DSS and SOC2, enhancing their security posture. This role involves managing certifications, conducting assessments, and shaping compliance strategy within a collaborative and innovative team.

Qualifications

• Proven track record in security compliance roles with deep PCI DSS expertise.
• Experience managing multiple compliance workstreams.
• Comprehensive knowledge of PCI standards and SOC2 control testing.

Responsibilities

• Leading all PCI compliance initiatives and certifications.
• Conducting regular internal assessments and gap analyses.
• Preparing executive-level reports on compliance status.

Skills

Security Compliance

PCI DSS

SOC2 Compliance

Analytical Skills

Project Management

Education

CISSP

CISA

ISA

PCIP

QSA

Job description

Security Compliance Manager - Payments, PCI DSS, SOC2 - £100,000

A rapidly growing payments technology company that has established itself as a major player in the UK market, is seeking a Security Compliance Manager to drive their critical compliance initiatives and strengthen their security posture as they continue their expansion across multiple markets.

This is a great opportunity for an experienced Security Compliance Manager to take ownership of comprehensive compliance programs within a dynamic payments environment. You'll be the go-to expert for PCI certifications, leading compliance strategy, and building robust security control frameworks that enable business growth while maintaining customer trust. Working within the Product Security team, you'll collaborate closely with engineering and product development to embed security compliance from the ground up.

The Security Compliance Manager's responsibilities:

• Leading and managing all PCI compliance initiatives including PCI DSS, PCI PIN, PCI P2PE certifications, with responsibility for achieving new certifications such as PCI MPoC and PCI SSF.
• Serving as the primary liaison with Qualified Security Assessors (QSAs) and managing relationships with external compliance stakeholders.
• Conducting regular internal assessments, gap analyses, and controls testing to ensure ongoing adherence to regulatory requirements including SOC2 and GDPR.
• Developing and maintaining comprehensive compliance documentation, policies, and procedures across multiple regulatory frameworks.
• Managing remediation efforts for identified compliance gaps and tracking progress against established timelines.
• Preparing executive-level reports on compliance status and proactively identifying opportunities to enhance security compliance posture.
• Contributing to security awareness initiatives and staying current with evolving compliance regulations and industry best practices.

The ideal Security Compliance Manager will have experience with the following:

• Proven track record in security compliance roles with deep expertise in PCI DSS and successful certification achievements.
• Comprehensive knowledge of PCI standards including PCI PIN, PCI P2PE, PCI MPoC, and PCI SSF frameworks.
• Hands-on experience with SOC2 compliance initiatives and control testing methodologies.
• Strong analytical and project management capabilities with the ability to manage multiple compliance workstreams simultaneously.
• Relevant certifications such as CISSP, CISA, ISA, QSA, or PCIP would be advantageous.
• Experience within payments, fintech, or highly regulated industries.

This is an exceptional opportunity to shape compliance strategy within a well-funded payments innovator that processes substantial transaction volumes for merchants across various sectors. If you're a detail-oriented compliance professional ready to make a significant impact in a collaborative, security-focused environment, please apply!

Security Compliance Manager - Payments, PCI DSS, SOC2 - £100,000

Burns Sheehan Ltd will consider applications based only on skills and ability and will not discriminate on any grounds.