Senior Security Consultant - PCI DSS

Bridewell Consulting Limited; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

25 Days Holiday

Flexible Working

Employee Shareholder Scheme

Performance Reward Model

Private Healthcare (Bupa)

Company Pension

Personal Day & Birthday Off

Family Leave

Enhanced Maternity

Training Budget

Life Assurance

Electric Vehicle Scheme

Cycle to Work Scheme

Job summary

Bridewell Consulting Limited is seeking a Senior Security Consultant focused on PCI DSS to join its Cyber Security Consulting practice in the UK. You will lead client engagements, define PCI DSS scope, perform gap assessments, and help achieve and maintain compliance across merchant and service provider environments.

The role covers broader cyber security consulting (ISO27001, NIST, NCSC CAF) and risk management, requiring effective stakeholder communication from technical teams to senior

Qualifications

• Delivering PCI DSS consultancy, compliance or assessment engagements.
• Good working knowledge of PCI DSS and its application within real-world payment environments.
• Conducting PCI DSS scoping exercises, gap assessments and readiness reviews.
• Working with ISO27001, NIST and NSCS CAF frameworks.
• Conducting cyber security risk assessments and managing risk/remediation.
• Assessing organisations against security standards and frameworks.
• Collaborating with technical teams on infrastructure, networks, apps, cloud environments and security controls.
• Producing client documentation and deliverables of high quality.
• Communicating with stakeholders at various levels including security leadership.

Responsibilities

• Deliver PCI DSS engagements across merchant and service provider environments, including assessment and non-assessment activities.
• Deliver broader cyber security consulting engagements (ISO27001, NIST, NCSC CAF, risk management, security maturity).
• Conduct PCI DSS gap assessments, readiness reviews and compliance assessments.
• Review business processes, technology and operational controls against PCI DSS requirements.
• Review complex environments including on-prem, cloud, third-party services and apps.
• Produce PCI DSS documentation and remediation plans, RoCs/AoCs when needed.
• Support PCI DSS v4.x requirements including Compensating Controls/Customised Approach.
• Assist leadership and sales with proposals, tenders and pre-sales activity.
• Quality assure the work of other consultants.

Skills

PCI DSS

Engagement delivery

ISO27001/NIST/NCSC CAF

Cyber security risk assessments

Security frameworks

Client communication

Documentation quality

Stakeholder communication

QSA exposure/ambition

Job description

One of the most exciting prospects in the UK cyber security sector today, Bridewell is a leading cyber security services company specialising in protecting and transforming critical business functions for some of the world’s most trusted organisations. We are the trusted partner for operators of essential services and provide end-to-end cyber security capabilities that help our clients overcome their security challenges, allowing them to operate safely and securely.

Bridewell holds the Gold level, Investors in People award which we feel solidifies and reflects the outstanding calibre of our people and what makes us truly One Team.

Who are we looking for?

We’re looking for a Senior Security Consultant with a strong focus on PCI DSS to join our growing Cyber Security Consulting practice.

You’ll have experience delivering client-facing cyber security and compliance engagements, with particular knowledge of PCI DSS and payment security environments.

Alongside PCI DSS, you’ll have broader cyber security knowledge and experience across areas such as ISO 27001, NIST, NCSC CAF, cyber risk management and security assessments. This broader experience is important in our consulting roles and mirrors the expectations of our existing Senior Consultant positions.

You’ll be comfortable engaging with stakeholders at all levels, from technical specialists through to senior leadership, and able to build strong, trusted client relationships while delivering consistently high-quality work.

What you’ll be doing

Your primary focus will be supporting and delivering PCI DSS consultancy engagements, working with organisations to understand their payment environments, define scope and achieve and maintain compliance. Alongside this, you will support other engagements across Consulting in areas such as ISO27001, NIST, NCSC CAF, Risk Management and security maturity.

Your responsibilities will include:

• Delivering PCI DSS engagements across merchant and service provider environments, including assessment and non-assessment activities.

• Delivering wider cyber security consulting engagements across areas such as ISO 27001, NIST, NCSC CAF, risk management and security maturity.

• Conducting PCI DSS gap assessments, readiness reviews and compliance assessments.

• Assessing business processes, technology and operational controls against PCI DSS requirements.

• Reviewing complex technical environments including traditional infrastructure, public and private cloud, third-party services and modern application environments.

• Supporting the production of high-quality PCI DSS documentation and deliverables, including assessment evidence, remediation plans and, where appropriate, RoC and AoC documentation.

• Supporting clients with PCI DSS v4.x requirements, including the use of Compensating Controls and the Customised Approach where appropriate.

• Providing practical remediation advice, helping clients translate PCI DSS requirements into achievable technical and operational improvements.

• Supporting the leadership and sales teams with proposals, tenders and pre-sales activity.

• Quality assuring the work of other consultants where appropriate.

You will need to have experience in:

• Delivering PCI DSS consultancy, compliance or assessment engagements.

• Good working knowledge of PCI DSS and its application within real-world payment environments.

• Conducting PCI DSS scoping exercises, gap assessments and readiness reviews.

• Working with other security frameworks such as ISO27001, NIST and NSCS CAF.

• Conducting cyber security risk assessments and managing risk and remediation activities.

• Assessing organisations against security standards and frameworks.

• Working with technical teams to understand infrastructure, networks, applications, cloud environments and security controls.

• Producing clear, accurate and professional client documentation.

• Communicating with stakeholders at different levels, including technical teams, security leadership and senior business stakeholders.

It would be great if you also have:

• Experience working within highly regulated industries such as Critical National Infrastructure , financial services or retail.

• Exposure to complex payment architectures, cloud environments, third-party payment providers or e-commerce environments.

• Experience supporting or working alongside a Qualified Security Assessor (QSA).

• Experience contributing to PCI DSS Reports on Compliance (RoCs), Attestations of Compliance (AoCs), Compensating Control Worksheets (CCWs) or Customised Approach documentation.

• Relevant cyber security or audit certifications such as CISSP, CISM, CISA, ISO 27001 Lead Implementer or ISO 27001 Lead Auditor.

• An ambition to develop towards QSA status, where appropriate.

Why Join Us?

Our vision is to create a safe, inclusive digital world where people and organisations can thrive. Our values of Do the Right Thing, One Team and Above and Beyond emphasises the importance of the part we play in society, and our commitment to our people and clients. Our story to-date has been phenomenal, but success doesn't end here and as we continue to grow and scale, we want to keep the same culture, passion and commitment to high quality that has enabled us to get this far. Bridewell will provide a great career opportunity with continual development as well as the following:

• 25 Days Holiday - Plus buy and sell options and increasing for long service

• Flexible Working (around core office hours)

• Employee Shareholder Scheme and Performance Reward Model

• Private Healthcare (Bupa)

• Company Pension

• Personal Day & Birthday Off - After 1 year of service

• Family Leave - After 1 year of service

• Enhanced Maternity based on length of service

• Access to a Training Budget

• Life Assurance

• Electric Vehicle Scheme

• Cycle to Work Scheme

Location: Bridewell operates a hybrid and flexible working policy, however you will be required to travel to different sites on occasion.

Note: To be eligible for this role you must either hold SC or be eligible and willing to go through security clearance.

Bridewell values diversity in the workplace and is a fair and equal opportunity employer. We are committed to creating an equal and inclusive working environment, with the aim that our employees will be truly representative of all sections of society and each person feels respected and able to give their best.