Security Manager: PCI DSS & ISO Lead for EU Ops

ISR Transport; Leeds; On-site; GBP 60,000 - 80,000; Full time

Benefits offered by this job

Excellent company benefits

Job summary

ISR Transport is hiring an experienced Security Manager based in Leeds to oversee information security across UK and European operations. The role covers governance, risk, PCI DSS, ISO 27001, ISO 22301 and Cyber Essentials Plus, plus resilience planning.

You will coordinate audits, manage risk registers, and drive remediation for vulnerabilities while collaborating with technical and non-technical stakeholders to elevate security across the business.

Qualifications

• Minimum 3 years’ experience in a Security Manager, Information Security Manager, GRC Manager or similar role.
• Demonstrable experience leading PCI DSS compliance/certification, including audits, remediation and ongoing compliance.
• Demonstrable experience leading ISO 27001 certification and ongoing ISMS compliance.
• Experience with Cyber Essentials Plus.
• Experience maintaining and managing security risk registers.
• Experience coordinating vulnerability scanning, penetration testing and remediation.
• Information security incident management/investigation experience.
• Experience with Microsoft 365, Azure and AWS environments.
• Strong stakeholder management and communication skills.
• Experience working with external auditors and third-party security assessments.

Responsibilities

• Managing compliance with PCI DSS, ISO 27001, ISO 22301 and Cyber Essentials Plus.
• Conducting security risk assessments, internal audits and control reviews.
• Maintaining and monitoring the organisational security risk register.
• Coordinating vulnerability scanning, penetration testing and remediation.
• Supporting information security incident investigation and resolution.
• Supporting business continuity and resilience planning.
• Coordinating third-party security audits across European operations.
• Working with stakeholders across the UK and internationally to improve security practices.

Skills

Governance & risk

PCI DSS

ISO 27001

Vulnerability management

Stakeholder comms

Auditing

Tools

Microsoft 365

Azure

AWS

Job description

ISR Transport is hiring an experienced Security Manager based in Leeds to oversee information security across UK and European operations. The role covers governance, risk, PCI DSS, ISO 27001, ISO 22301 and Cyber Essentials Plus, plus resilience planning.

You will coordinate audits, manage risk registers, and drive remediation for vulnerabilities while collaborating with technical and non-technical stakeholders to elevate security across the business.