Strategic IT Security Lead — PCI-DSS & Risk

Marshall Wolfe; Luton; Hybrid; GBP 75,000 - 90,000; Full time

Job summary

Marshall Wolfe is supporting a national organisation near Luton in recruiting an IT Security Manager to own the PCI-DSS programme and shape security strategy.

The role involves governance, risk, incident response, and collaboration with senior stakeholders; standalone but with significant ownership.

Hybrid role with two days on-site in Luton, offering hands-on and strategic responsibilities across endpoint, cloud, and third‑party risk.

Qualifications

• Experience owning PCI-DSS compliance in a Tier 1 environment.
• Strong knowledge of security frameworks, controls and governance.
• Proven incident response, risk assessment and audit delivery experience.
• Ability to engage with senior stakeholders and external auditors.

Responsibilities

• Develop and continuously improve the organisation's cyber security strategy, controls and policies.
• Monitor threats and protect endpoints, networks, cloud and identity environments.
• Lead security incident response, investigations and remediation efforts.
• Drive vulnerability management and penetration testing programmes to resolution.
• Coordinate PCI-DSS compliance activities with external assessors and internal teams.

Skills

PCI-DSS

Cyber security

Governance

Incident response

Vulnerability management

Audit coordination

Stakeholder management

Security strategy

Threat monitoring

Compliance reporting

Tools

Azure

AWS

SIEM

Job description

Marshall Wolfe is supporting a national organisation near Luton in recruiting an IT Security Manager to own the PCI-DSS programme and shape security strategy.

The role involves governance, risk, incident response, and collaboration with senior stakeholders; standalone but with significant ownership.

Hybrid role with two days on-site in Luton, offering hands-on and strategic responsibilities across endpoint, cloud, and third‑party risk.