Senior PCI-DSS Security Lead – IT & Compliance

Marshall Wolfe; Luton; On-site; GBP 90,000 - 120,000; Full time

Job summary

Marshall Wolfe is seeking an IT PCI-DSS Security Manager to own the organisation's PCI-DSS compliance and drive cyber security strategy from operational to strategic levels. The role is based near Luton, UK, requiring hands-on leadership and direct collaboration with senior stakeholders and external auditors.

You will lead governance, risk and compliance activities, manage security incidents and oversee vulnerability remediation, while promoting security awareness across the business.

Qualifications

• Proven IT or Cyber Security experience with ownership of PCI-DSS in a Tier 1 environment.
• Strong understanding of security frameworks, controls and governance practices.
• Experience managing security incidents, vulnerability remediation and audit activities.
• Ability to engage confidently with senior stakeholders and external auditors.
• Industry certifications (CISSP, CISM, CISA, PCI ISA) are highly desirable.
• Knowledge of Azure, AWS and modern SOC/SIEM technologies.
• Experience in highly regulated environments (retail, hospitality, payments) is advantageous.

Responsibilities

• Develop and continuously improve the organisation's cyber security strategy, controls and policies.
• Monitor threats and protect endpoints, networks, cloud and identity environments.
• Lead incident response activities, investigations and remediation efforts.
• Drive vulnerability management and penetration testing programmes to resolution.
• Act as the internal cyber security subject matter expert.

Skills

IT/Cyber security

PCI-DSS

Stakeholder engagement

Incident response

Vulnerability management

Audits & compliance

Security frameworks & governance

Cloud security (Azure/AWS)

Education

Industry certifications (CISSP/CISM/CISA/PCI ISA)

Tools

Azure

AWS

SOC/SIEM technologies

Job description

Marshall Wolfe is seeking an IT PCI-DSS Security Manager to own the organisation's PCI-DSS compliance and drive cyber security strategy from operational to strategic levels. The role is based near Luton, UK, requiring hands-on leadership and direct collaboration with senior stakeholders and external auditors.

You will lead governance, risk and compliance activities, manage security incidents and oversee vulnerability remediation, while promoting security awareness across the business.