Strategic IT Security Manager | PCI-DSS & Risk Lead

Moto; Fancott; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Up to 20% bonus

25 days holiday

Exclusive discounts

Enhanced maternity, paternity, pension

Life assurance & sick pay

Fantastic training opportunities

Job summary

Moto, one of the UK's biggest motorway service operators, seeks an IT Security Manager to own our cyber security program and drive PCI-DSS compliance. This hands-on role offers hybrid working with 2 days in our Toddington office or visiting sites, shaping security across infrastructure and elevating risk management.

You will engage senior stakeholders, lead audits and awareness initiatives, and deliver practical security improvements to protect our people and customers.

Qualifications

• Significant IT/cyber security experience with PCI-DSS ownership.
• Strong knowledge of security frameworks and controls.
• Experience leading incident response and remediation efforts.

Responsibilities

• Lead and continuously improve Moto's cyber security strategy, policies and controls.
• Monitor emerging threats and ensure effective security measures across our infrastructure and systems.
• Own security incident response activities, from investigation through to remediation.
• Manage vulnerability assessments and penetration testing programmes.
• Lead our Tier 1 PCI-DSS compliance programme and annual audit process.
• Act as the key contact for auditors and assessors.
• Maintain security documentation, evidence and compliance records.
• Conduct risk assessments and manage the security risk register.
• Deliver security awareness initiatives across the business.
• Manage relationships with third-party suppliers, auditors and security partners.

Skills

PCI-DSS compliance ownership

Security frameworks & controls

Incident & remediation management

Stakeholder engagement

Risk-based decision making

Independent ownership

Education

CISSP/CISM/CISA or similar certifications

Job description

Moto, one of the UK's biggest motorway service operators, seeks an IT Security Manager to own our cyber security program and drive PCI-DSS compliance. This hands-on role offers hybrid working with 2 days in our Toddington office or visiting sites, shaping security across infrastructure and elevating risk management.

You will engage senior stakeholders, lead audits and awareness initiatives, and deliver practical security improvements to protect our people and customers.