Senior Security Consultant - PCI DSS job at Bridewell

Bridewell is hiring: Senior Security Consultant - PCI DSS. One of the most exciting prospects in the UK cyber security sector today, Bridewell is a…

Company: Bridewell · Work mode: hybrid, partly remote · Contract: Full-time

One of the most exciting prospects in the UK cyber security sector today, Bridewell is a leading cyber security services company specialising in protecting and transforming critical business functions for some of the world’s most trusted organisations. We are the trusted partner for operators of essential services and provide end-to-end cyber security capabilities that help our clients overcome their security challenges, allowing them to operate safely and securely.

Bridewell holds the Gold level, Investors in People award which we feel solidifies and reflects the outstanding calibre of our people and what makes us truly One Team.

Who are we looking for?

We’re looking for a Senior Security Consultant with a strong focus on PCI DSS to join our growing Cyber Security Consulting practice.

You’ll have experience delivering client-facing cyber security and compliance engagements, with particular knowledge of PCI DSS and payment security environments.

Alongside PCI DSS, you’ll have broader cyber security knowledge and experience across areas such as ISO 27001, NIST, NCSC CAF, cyber risk management and security assessments. This broader experience is important in our consulting roles and mirrors the expectations of our existing Senior Consultant positions.

You’ll be comfortable engaging with stakeholders at all levels, from technical specialists through to senior leadership, and able to build strong, trusted client relationships while delivering consistently high-quality work.

What you’ll be doing

Your primary focus will be supporting and delivering PCI DSS consultancy engagements, working with organisations to understand their payment environments, define scope and achieve and maintain compliance. Alongside this, you will support other engagements across Consulting in areas such as ISO27001, NIST, NCSC CAF, Risk Management and security maturity.

Your responsibilities will include:
• Delivering PCI DSS engagements across merchant and service provider environments, including assessment and non-assessment activities.
• Delivering wider cyber security consulting engagements across areas such as ISO 27001, NIST, NCSC CAF, risk management and security maturity.
• Conducting PCI DSS gap assessments, readiness reviews and compliance assessments.
• Assessing business processes, technology and operational controls against PCI DSS requirements.
• Reviewing complex technical environments including traditional infrastructure, public and private cloud, third-party services and modern application environments.
• Supporting the production of high-quality PCI DSS documentation and deliverables, including assessment evidence, remediation plans and, where appropriate, RoC and AoC documentation.
• Supporting clients with PCI DSS v4.x requirements, including the use of Compensating Controls and the Customised Approach where appropriate.
• Providing practical remediation advice, helping clients translate PCI DSS requirements into achievable technical and operational improvements.
• Supporting the leadership and sales teams with proposals, tenders and pre-sales activity.
• Quality assuring the work of other consultants where appropriate.

You will need to have experience in:
• Delivering PCI DSS consultancy, compliance or assessment engagements.
• Good working knowledge of PCI DSS and its application within real-world payment environments.
• Conducting PCI DSS scoping exercises, gap assessments and readiness reviews.
• Working with other security frameworks such as ISO27001, NIST and NSCS CAF.
• Conducting cyber security risk assessments and managing risk and remediation activities.
• Assessing organisations against security standards and frameworks.
• Working with technical teams to understand infrastructure, networks, applications, cloud environments and security controls.
• Producing clear, accurate and professional client documentation.
• Communicating with stakeholders at different levels, including technical teams, security leadership and senior business stakeholders.

It would be great if you also have:
• Experience working within highly regulated industries such as Critical National Infrastructure , financial services or retail.
• Exposure to complex payment architectures, cloud environments, third-party payment providers or e-commerce environments.
• Experience supporting or working alongside a Qualified Security Assessor (QSA).
• Experience contributing to PCI DSS Reports on Compliance (RoCs), Attestations of Compliance (AoCs), Compensating Control Worksheets (CCWs) or Customised Approach documentation.
• Relevant cyber security or audit certifications such as CISSP, CISM, CISA, ISO 27001 Lead Implementer or ISO 27001 Lead Auditor.
• An ambition to develop towards QSA status, where appropriate.

Why Join Us?

Our vision is to create a safe, inclusive digital world where people and organisations can thrive. Our values of Do the Right Thing, One Team and Above and Beyond emphasises the importance of the part we play in society, and our commitment to our people and clients. Our story to-date has been phenomenal, but success doesn't end here and as we continue to grow and scale, we want to keep the same culture, passion and commitment to high quality that has enabled us to get this far. Bridewell will provide a great career opportunity with continual development as well as the following:

• 25 Days Holiday - Plus buy and sell options and increasing for long service
• Flexible Working (around core office hours)
• Employee Shareholder Scheme and Performance Reward Model
• Private Healthcare (Bupa)
• Company Pension
• Personal Day & Birthday Off - After 1 year of service
• Family Leave - After 1 year of service
• Enhanced Maternity based on length of service
• Access to a Training Budget
• Life Assurance
• Electric Vehicle Scheme
• Cycle to Work Scheme

Location: Bridewell operates a hybrid and flexible working policy, however you will be required to travel to different sites on occasion.

Note: To be eligible for this role you must either hold SC or be eligible and willing to go through security clearance.

Bridewell values diversity in the workplace and is a fair and equal opportunity employer. We are committed to creating an equal and inclusive working environment, with the aim that our employees will be truly representative of all sections of society and each person feels respected and able to give their best.