Talent.com
Navan
PCI & SOX Compliance SpecialistNavan • London, England, UK
PCI & SOX Compliance Specialist

PCI & SOX Compliance Specialist

Navan • London, England, UK
27 days ago
Job type
  • Full-time
Job description


The Security Compliance Analyst will be a critical hands-on member of the Navan Governance Risk Compliance and Trust (GRCT) Team specifically embedded in London to drive the compliance integration between Navan and Reed & Mackay.

This is not a high-level policy writing or checking boxes role. We are looking for an active execution-focused compliance professional to untangle legacy systems map control deficiencies and run daily operational workflows. Acting as a decisive bridge between engineering sprint teams IT infrastructure and US-based external auditors you will own the day-to-day transaction compliance and technical evidence pipeline that keeps our global travel and expense platforms bulletproof.


What Youll Do

  • Own Vulnerability Remediation Loops: Actively track and oversee quarterly PCI ASV scans and penetration testing cycles collaborating directly with IT and engineering teams to ensure patches are executed within strict SLA windows.
  • Lead the Integration Pipeline: Conduct continuous gap analyses and map security controls as we merge legacy travel infrastructure into Navans modern cloud frameworks.
  • Drive SOX 404 Controls: Take ownership of testing and validating IT General Controls (ITGCs) under Sarbanes-Oxley Section 404 with a heavy emphasis on access control management (Joiners/Movers/Leavers) and secure code deployment.
  • Embed with Engineering: Partner with development teams to automate manual evidence gathering translating rigid compliance jargon into clear actionable JIRA tickets.
  • Collaborate Globally: Partner closely with US-based audit firms and compliance bodies. This includes a flexible schedule to work late hours (until 9:00 PM10:00 PM) a few days per month on specific US alignment days.
  • Track Open Deficiencies: Manage the risk register and remediation tracking lifecycle from initial identification to final verification and closure.

What Were Looking For

  • Experience: Minimum of 3 years of hands-on corporate operational experience in information security compliance. You must have active experience sitting on a corporate security or IT teampurely academic training or governmental advisory backgrounds will not fit the speed of this role.
  • PCI & SOX Technical Depth: Proved practical exposure executing compliance frameworks for transactional environments. You must understand Section 404 ITGCs and the technical mechanics of PCI DSS (including cardholder data protection environments and SAQs).
  • Tools & Systems Mastery: Comfortable navigating tracking platforms such as JIRA ServiceNow GRC or AuditBoard to monitor assign and resolve open compliance findings.
  • A Technical Edge: A baseline technical background (e.g. computer science systems administration or IT support) that allows you to confidently push back on or guide engineers during patch cycles.
  • Location & Hours Flexibility: Willingness to work under a hybrid model out of our London office (4 days a week) and the routine flexibility needed to support monthly evening shifts for US team synchronization.
  • Language requirements: Full proficiency in English.
  • Bonus Points: Certifications such as CompTIA Security or ISO 27001 Internal Auditor.

Required Experience:

IC


Employment Type : Full Time
Experience: years
Vacancy: 1
Create a job alert for this search

PCI & SOX Compliance Specialist • London, England, UK

Similar jobs

Senior Compliance Lead — SOC 2 & ISO 27001 (Remote UK)

EnergySys LimitedGreater London, England, GB
Remote
Full-time

EnergySys is seeking a dedicated Compliance & Governance professional to own the SOC 2 Type II and ISO 27001 audits, maintain the ISMS, and drive regulatory compliance across UK, Australia, and US ... Show more

 • Promoted

SOC Analyst: Threat Hunting & 24/7 Incident Response

AvanadeGreater London, England, GB
Full-time

Microsoft Security Operations Centre (SOC) Analyst – T2 & T3.Preferred Location - Newcastle.The SOC Analyst Team operates as a next‑generation, intelligence‑led Security Operations function, design... Show more

 • Promoted

Global Transfer Pricing Senior - Advisory & Compliance

Menzies LLPCity Of London, England, GB
Full-time

Menzies LLP in London seeks a Transfer Pricing Senior to lead delivery of TP compliance and advisory services for a diverse client portfolio.You will engage in technically challenging work and inte... Show more

 • Promoted

Group Internal Controls Lead (SOX & Compliance)

LightsourcelabsGreater London, England, GB
Full-time

Lightsource Labs is looking for a Group Internal Control Manager to oversee the design and management of effective internal controls.This role requires a detail-oriented individual with a solid und... Show more

 • Promoted

PCI ASV Analyst: Compliance & Client Guidance

Tenable, Inc.Greater London, England, GB
Full-time

Tenable is seeking a PCI ASV Analyst to guide customers through the PCI DSS ASV external scanning process and ensure compliance with requirement 11.You will lead all client-facing engagements, mana... Show more

 • Promoted

IT Risk & Compliance Lead: SOX, GDPR & DORA

Chubb Ltd.Greater London, England, GB
Full-time

Chubb is seeking a hands-on Tech Risk & Compliance Lead in the United Kingdom to design, implement and test SOX ITGCs across the EMEA IT estate.You will work with architects and application owners ... Show more

 • Promoted

Global ITGC & SOX Controls Leader

Stealth AI StartupGreater London, England, United Kingdom
Full-time

Stealth AI Startup is seeking an experienced IT SOX leader to own the ITGC SOX programme across a global tech estate.You will design, implement and embed a robust controls framework in collaboratio... Show more

 • Promoted

PCI DSS Compliance & Assurance Lead

SelfridgesCity of Westminster, England, GB
Full-time

Selfridges is seeking a PCI Assurance Analyst to own the PCI DSS program.You will interpret requirements, lead gap analyses, coordinate SAQs and AOCs, and work with QSAs, acquirers and brands to dr... Show more

 • Promoted

SOC Analyst - Tier 2/3, 24/7 Threat Detection & Response

3004 Avanade UK Limited CompanyCity Of London, England, GB
Full-time

Microsoft Security Operations Centre (SOC) Analyst – T2 & T3 (Security Clearance Required).The SOC Analyst Team operates as a next‑generation, intelligence‑led Security Operations function, deliver... Show more

 • Promoted

Compliance & Risk Solicitor

Errington LegalBishop's Stortford, England, GB
Permanent

Take the next step in your career with this supportive and highly-regarded Compliance & Risk team.Compliance & RiskSolicitor - Bishop's Stortford with hybrid working.A top regional full-service law... Show more

 • Promoted

Security and Compliance Manager

SierraGreater London, England, GB
Full-time

At Sierra, we're creating a platform to help businesses build better, more human customer experiences with AI.We are primarily an in-person company based in San Francisco, with growing offices in A... Show more

 • Promoted

Certification Integrity and Compliance Specialist

LGCGreater London, England, GB
Full-time

LGC is seeking a Certification Integrity Officer to support the Certification Integrity team in ensuring our certification processes run smoothly and meet the highest standards.The role involves ma... Show more

 • Promoted

Senior Third-Party Compliance & Risk Lead

EricssonGreater London, England, GB
Full-time

A leading telecommunications company is seeking a Compliance Officer to enhance their Ethics and Compliance Program.This role demands expertise in anti-bribery and third-party risk assessments and ... Show more

 • Promoted

Rail Environmental Advisor: Compliance & Net Zero

JS Money LimitedGreater London, England, GB
Full-time

JS Money Limited is offering an exciting opportunity for an experienced Environmental Assessor to join their HSQE team in the rail sector.The position provides significant scope for progression wit... Show more

 • Promoted

Global Risk Leader - Fintech & Compliance

AirwallexGreater London, England, United Kingdom
Full-time

Airwallex is seeking a Head of Risk to develop and scale its global risk management framework across operations.This leadership role requires extensive experience in risk management, compliance, an... Show more

 • Promoted

Equities Trade Surveillance Compliance – 3-Month Cover

LGBT GreatGreater London, England, GB
Temporary

LGBT Great seeks a Compliance Officer for Equities Trade Surveillance on a temporary basis (Paternity Cover).Based in London, you will ensure effective surveillance to detect market misconduct and ... Show more

 • Promoted

Maritime Vetting Lead — Compliance & Risk

Consortio RG LtdGreater London, England, GB
Full-time

A leading maritime risk and compliance organization in London is seeking a Vetting Superintendent to manage vessel vetting processes.The role involves ensuring alignment with international regulati... Show more

 • Promoted

SOX & Controls Analyst - Documentation & Compliance

Neighbourly®Greater London, England, GB
Temporary

A prominent home services company is looking for a Business & Documentation Analyst to ensure SOX compliance and produce high-quality documentation.Located in Brackley, Northamptonshire, this fixed... Show more

 • Promoted

Compliance Specialist

Danos GroupLondon, England, GB
Full-time

Senior Consultant, Risk & Quantitative Analytics EMEA at Danos Group.We’re working with a top-tier global asset manager, with an AUM in excess of $500B, who is looking to grow their dynamic team an... Show more

 • Promoted

KYC & AML Specialist - Trading Compliance (London)

Petroineos Trading LimitedGreater London, England, GB
Full-time

A leading trading company in London is seeking a professional to conduct Anti-Money Laundering (AML) and Know Your Customer (KYC) activities.The role involves liaising with traders and business sup... Show more