Talent.com
Navan
PCI & SOX Compliance SpecialistNavan • London, England, UK
PCI & SOX Compliance Specialist

PCI & SOX Compliance Specialist

Navan • London, England, UK
28 days ago
Job type
  • Full-time
Job description


The Security Compliance Analyst will be a critical hands-on member of the Navan Governance Risk Compliance and Trust (GRCT) Team specifically embedded in London to drive the compliance integration between Navan and Reed & Mackay.

This is not a high-level policy writing or checking boxes role. We are looking for an active execution-focused compliance professional to untangle legacy systems map control deficiencies and run daily operational workflows. Acting as a decisive bridge between engineering sprint teams IT infrastructure and US-based external auditors you will own the day-to-day transaction compliance and technical evidence pipeline that keeps our global travel and expense platforms bulletproof.


What Youll Do

  • Own Vulnerability Remediation Loops: Actively track and oversee quarterly PCI ASV scans and penetration testing cycles collaborating directly with IT and engineering teams to ensure patches are executed within strict SLA windows.
  • Lead the Integration Pipeline: Conduct continuous gap analyses and map security controls as we merge legacy travel infrastructure into Navans modern cloud frameworks.
  • Drive SOX 404 Controls: Take ownership of testing and validating IT General Controls (ITGCs) under Sarbanes-Oxley Section 404 with a heavy emphasis on access control management (Joiners/Movers/Leavers) and secure code deployment.
  • Embed with Engineering: Partner with development teams to automate manual evidence gathering translating rigid compliance jargon into clear actionable JIRA tickets.
  • Collaborate Globally: Partner closely with US-based audit firms and compliance bodies. This includes a flexible schedule to work late hours (until 9:00 PM10:00 PM) a few days per month on specific US alignment days.
  • Track Open Deficiencies: Manage the risk register and remediation tracking lifecycle from initial identification to final verification and closure.

What Were Looking For

  • Experience: Minimum of 3 years of hands-on corporate operational experience in information security compliance. You must have active experience sitting on a corporate security or IT teampurely academic training or governmental advisory backgrounds will not fit the speed of this role.
  • PCI & SOX Technical Depth: Proved practical exposure executing compliance frameworks for transactional environments. You must understand Section 404 ITGCs and the technical mechanics of PCI DSS (including cardholder data protection environments and SAQs).
  • Tools & Systems Mastery: Comfortable navigating tracking platforms such as JIRA ServiceNow GRC or AuditBoard to monitor assign and resolve open compliance findings.
  • A Technical Edge: A baseline technical background (e.g. computer science systems administration or IT support) that allows you to confidently push back on or guide engineers during patch cycles.
  • Location & Hours Flexibility: Willingness to work under a hybrid model out of our London office (4 days a week) and the routine flexibility needed to support monthly evening shifts for US team synchronization.
  • Language requirements: Full proficiency in English.
  • Bonus Points: Certifications such as CompTIA Security or ISO 27001 Internal Auditor.

Required Experience:

IC


Employment Type : Full Time
Experience: years
Vacancy: 1
Create a job alert for this search

PCI & SOX Compliance Specialist • London, England, UK

Similar jobs

Senior Compliance Lead — SOC 2 & ISO 27001 (Remote UK)

EnergySys LimitedGreater London, England, GB
Remote
Full-time

EnergySys is seeking a dedicated Compliance & Governance professional to own the SOC 2 Type II and ISO 27001 audits, maintain the ISMS, and drive regulatory compliance across UK, Australia, and US ... Show more

 • Promoted

Third-Party Risk Lead: Security & Compliance

AVEVAGreater London, England, GB
Full-time

AVEVA is seeking a Third-Party Risk Management Officer to oversee and manage risks associated with suppliers.The role involves assessing security risks and ensuring suppliers meet AVEVA’s standards... Show more

 • Promoted

SOC Analyst: Threat Hunting & 24/7 Incident Response

AvanadeGreater London, England, GB
Full-time

Microsoft Security Operations Centre (SOC) Analyst – T2 & T3.Preferred Location - Newcastle.The SOC Analyst Team operates as a next‑generation, intelligence‑led Security Operations function, design... Show more

 • Promoted

SOC Analyst: Threat Detection & Incident Response

Sprytech LtdGreater London, England, GB
Full-time +1

A cybersecurity company in Greater London is seeking a SOC Analyst to monitor security alerts, analyze incidents, and respond to threats.The ideal candidate will possess a degree in IT or Cybersecu... Show more

 • Promoted

Global Transfer Pricing Senior - Advisory & Compliance

Menzies LLPCity Of London, England, GB
Full-time

Menzies LLP in London seeks a Transfer Pricing Senior to lead delivery of TP compliance and advisory services for a diverse client portfolio.You will engage in technically challenging work and inte... Show more

 • Promoted

Group Internal Controls Lead (SOX & Compliance)

LightsourcelabsGreater London, England, GB
Full-time

Lightsource Labs is looking for a Group Internal Control Manager to oversee the design and management of effective internal controls.This role requires a detail-oriented individual with a solid und... Show more

 • Promoted

PCI ASV Analyst: Compliance & Client Guidance

Tenable, Inc.Greater London, England, GB
Full-time

Tenable is seeking a PCI ASV Analyst to guide customers through the PCI DSS ASV external scanning process and ensure compliance with requirement 11.You will lead all client-facing engagements, mana... Show more

 • Promoted

IT Risk & Compliance Lead: SOX, GDPR & DORA

Chubb Ltd.Greater London, England, GB
Full-time

Chubb is seeking a hands-on Tech Risk & Compliance Lead in the United Kingdom to design, implement and test SOX ITGCs across the EMEA IT estate.You will work with architects and application owners ... Show more

 • Promoted

Global ITGC & SOX Controls Leader

Stealth AI StartupGreater London, England, United Kingdom
Full-time

Stealth AI Startup is seeking an experienced IT SOX leader to own the ITGC SOX programme across a global tech estate.You will design, implement and embed a robust controls framework in collaboratio... Show more

 • Promoted

PCI DSS Compliance & Assurance Lead

SelfridgesCity of Westminster, England, GB
Full-time

Selfridges is seeking a PCI Assurance Analyst to own the PCI DSS program.You will interpret requirements, lead gap analyses, coordinate SAQs and AOCs, and work with QSAs, acquirers and brands to dr... Show more

 • Promoted

SOC Analyst - Tier 2/3, 24/7 Threat Detection & Response

3004 Avanade UK Limited CompanyCity Of London, England, GB
Full-time

Microsoft Security Operations Centre (SOC) Analyst – T2 & T3 (Security Clearance Required).The SOC Analyst Team operates as a next‑generation, intelligence‑led Security Operations function, deliver... Show more

 • Promoted

Compliance & Risk Solicitor

Errington LegalBishop's Stortford, England, GB
Permanent

Take the next step in your career with this supportive and highly-regarded Compliance & Risk team.Compliance & RiskSolicitor - Bishop's Stortford with hybrid working.A top regional full-service law... Show more

 • Promoted

Security and Compliance Manager

SierraGreater London, England, GB
Full-time

At Sierra, we're creating a platform to help businesses build better, more human customer experiences with AI.We are primarily an in-person company based in San Francisco, with growing offices in A... Show more

 • Promoted

Certification Integrity and Compliance Specialist

LGCGreater London, England, GB
Full-time

LGC is seeking a Certification Integrity Officer to support the Certification Integrity team in ensuring our certification processes run smoothly and meet the highest standards.The role involves ma... Show more

 • Promoted

Senior Third-Party Compliance & Risk Lead

EricssonGreater London, England, GB
Full-time

A leading telecommunications company is seeking a Compliance Officer to enhance their Ethics and Compliance Program.This role demands expertise in anti-bribery and third-party risk assessments and ... Show more

 • Promoted

Equities Trade Surveillance Compliance – 3-Month Cover

LGBT GreatGreater London, England, GB
Temporary

LGBT Great seeks a Compliance Officer for Equities Trade Surveillance on a temporary basis (Paternity Cover).Based in London, you will ensure effective surveillance to detect market misconduct and ... Show more

 • Promoted

Maritime Vetting Lead — Compliance & Risk

Consortio RG LtdGreater London, England, GB
Full-time

A leading maritime risk and compliance organization in London is seeking a Vetting Superintendent to manage vessel vetting processes.The role involves ensuring alignment with international regulati... Show more

 • Promoted

SOX & Controls Analyst - Documentation & Compliance

Neighbourly®Greater London, England, GB
Temporary

A prominent home services company is looking for a Business & Documentation Analyst to ensure SOX compliance and produce high-quality documentation.Located in Brackley, Northamptonshire, this fixed... Show more

 • Promoted

Compliance Specialist

Danos GroupLondon, England, GB
Full-time

Senior Consultant, Risk & Quantitative Analytics EMEA at Danos Group.We’re working with a top-tier global asset manager, with an AUM in excess of $500B, who is looking to grow their dynamic team an... Show more

 • Promoted

KYC & AML Specialist - Trading Compliance (London)

Petroineos Trading LimitedGreater London, England, GB
Full-time

A leading trading company in London is seeking a professional to conduct Anti-Money Laundering (AML) and Know Your Customer (KYC) activities.The role involves liaising with traders and business sup... Show more