Senior PCI DSS Security Consultant | Compliance & Risk

Bridewell; Greater London; Hybrid; GBP 90,000 - 115,000; Full time

Benefits offered by this job

25 Days Holiday

Flexible Working

Employee Shareholder Scheme and Bonus

Private Healthcare (Bupa)

Company Pension

Training Budget

Life Assurance

Electric Vehicle Scheme

Cycle to Work

Job summary

Bridewell is recruiting a Senior Security Consultant focused on PCI DSS to join our Cyber Security Consulting practice in the UK. You will lead client-facing engagements, assess payment environments, define scope, and drive compliance across merchant and service provider setups.

Beyond PCI DSS, you’ll contribute to ISO 27001, NIST, and NCSC CAF projects, help with risk assessments, and deliver high-quality documentation, evidence packs, and RoCs/AoCs when required.

Qualifications

• Experience delivering PCI DSS consultancy or assessments.
• Strong knowledge of PCI DSS in real-world payment environments.
• Familiarity with ISO27001, NIST, and NCSC CAF.
• Ability to produce clear client documentation and RoCs/AoCs when required.
• Experience with risk assessments and remediation planning.

Responsibilities

• Lead PCI DSS engagements across merchant and service provider environments.
• Conduct gap assessments, readiness reviews and scoping.
• Deliver broader security consulting across ISO27001, NIST and risk management.
• Produce high-quality client deliverables and remediation plans.
• Support sales with proposals and pre-sales activities.

Skills

PCI DSS

Security consulting

Stakeholder management

Risk assessment

Cloud & applications security

Education

CISSP

CISM

CISA

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

Job description

Bridewell is recruiting a Senior Security Consultant focused on PCI DSS to join our Cyber Security Consulting practice in the UK. You will lead client-facing engagements, assess payment environments, define scope, and drive compliance across merchant and service provider setups.

Beyond PCI DSS, you’ll contribute to ISO 27001, NIST, and NCSC CAF projects, help with risk assessments, and deliver high-quality documentation, evidence packs, and RoCs/AoCs when required.