Security Manager (PCI DSS)

ISR Transport; Leeds; On-site; GBP 60,000 - 80,000; Full time

Benefits offered by this job

Excellent company benefits

Job summary

ISR Transport is hiring an experienced Security Manager based in Leeds to oversee information security across UK and European operations. The role covers governance, risk, PCI DSS, ISO 27001, ISO 22301 and Cyber Essentials Plus, plus resilience planning.

You will coordinate audits, manage risk registers, and drive remediation for vulnerabilities while collaborating with technical and non-technical stakeholders to elevate security across the business.

Qualifications

• Minimum 3 years’ experience in a Security Manager, Information Security Manager, GRC Manager or similar role.
• Demonstrable experience leading PCI DSS compliance/certification, including audits, remediation and ongoing compliance.
• Demonstrable experience leading ISO 27001 certification and ongoing ISMS compliance.
• Experience with Cyber Essentials Plus.
• Experience maintaining and managing security risk registers.
• Experience coordinating vulnerability scanning, penetration testing and remediation.
• Information security incident management/investigation experience.
• Experience with Microsoft 365, Azure and AWS environments.
• Strong stakeholder management and communication skills.
• Experience working with external auditors and third-party security assessments.

Responsibilities

• Managing compliance with PCI DSS, ISO 27001, ISO 22301 and Cyber Essentials Plus.
• Conducting security risk assessments, internal audits and control reviews.
• Maintaining and monitoring the organisational security risk register.
• Coordinating vulnerability scanning, penetration testing and remediation.
• Supporting information security incident investigation and resolution.
• Supporting business continuity and resilience planning.
• Coordinating third-party security audits across European operations.
• Working with stakeholders across the UK and internationally to improve security practices.

Skills

Governance & risk

PCI DSS

ISO 27001

Vulnerability management

Stakeholder comms

Auditing

Tools

Microsoft 365

Azure

AWS

Job description

• Plus excellent company benefits and incentives

We’re recruiting for an experienced Security Manager to join an established international technology organisation operating within the intelligent mobility, road technology and payments sector. This is a broad information security position combining cyber security, governance, risk, compliance and operational resilience. You’ll work across UK and European operations, helping maintain key security accreditations while ensuring vulnerabilities, risks and security requirements are effectively managed across the business.

The environment includes high-volume, payment-focused technology, making PCI DSS, information security and business resilience particularly important.

Role and Responsibilities:

• Managing compliance with PCI DSS, ISO 27001, ISO 22301 and Cyber Essentials Plus
• Conducting security risk assessments, internal audits and control reviews
• Maintaining and monitoring the organisational security risk register
• Coordinating vulnerability scanning, penetration testing and remediation
• Supporting information security incident investigation and resolution
• Supporting business continuity and resilience planning
• Coordinating third-party security audits across European operations
• Working with technical and non-technical stakeholders across the UK and internationally to continuously improve security practices

Skills and Experience:

• Minimum 3 years’ experience in a Security Manager, Information Security Manager, GRC Manager or similar role
• Demonstrable experience leading PCI DSS compliance/certification, including audits, remediation and ongoing compliance
• Demonstrable experience leading ISO 27001 certification and ongoing ISMS compliance
• Experience with Cyber Essentials Plus
• Experience maintaining and managing security risk registers
• Experience coordinating vulnerability scanning, penetration testing and remediation
• Information security incident management/investigation experience
• Experience with Microsoft 365, Azure and AWS environments
• Strong stakeholder management and communication skills
• Experience working with external auditors and third-party security assessments
• Security certifications such as CISSP, CISA or ISO 27001 Lead Auditor/Implementer would be advantageous

working as a Security Manager based in Leeds, West Yorkshire;