PCI Assurance Analyst
Job Introduction
What is the role?
Reporting to the IT Security and IT GRC Manager, the PCI Assurance Analyst acts as our
Payment Card Industry Data Security Standard (PCI DSS) subject matter expert and
lead for the PCI-DSS compliance process.
Our PCI Assurance Analyst is responsible for ensuring compliance with the PCI DSS by
assessing, validating, and evidencing how cardholder data is protected across people,
processes and technology.
The role involves interpreting PCI requirements, conducting control assessments and
gap analyses, coordinating self-assessments or external audits, reviewing technical and
procedural evidence and working closely with IT, security, and business teams to
remediate compliance gaps. Our PCI Assurance Analyst also maintains compliance
documentation, tracks remediation plans, supports Qualified Security Assessor (QSA)
engagements, and provides clear assurance reporting to stakeholders, helping reduce
regulatory, financial, and reputational risk associated with payment card data.
The role can be based in either London or Leicester.
Role responsibilities
• Interpret and apply PCI DSS requirements to our payment card environment across people, process, and technology
• Perform PCI DSS gap assessments against current controls and identify areas of non-compliance or control weakness
• Coordinate and manage PCI compliance activities including Self-Assessment Questionnaires (SAQs), Attestations of Compliance (AOC), and annual validation cycles Collect, review and validate evidence
• Act as the primary liaison with Qualified Security Assessors (QSAs), acquirers, and payment brands during audits and assessments
• Track and support remediation plans, ensuring issues are clearly documented, risk-assessed, prioritised, and resolved
• Maintain accurate PCI documentation, including scoping diagrams, diagrams, risk assessments, policies, and procedures
• Support PCI scoping decisions, ensuring only necessary systems are in scope and controls are applied appropriately
• Provide assurance reporting to senior management on compliance status, risks, exceptions, and audit readiness
• Advise delivery teams on secure design and change impacts related to PCI-scoped systems
• Monitor changes to the PCI DSS standard and assess their impact on existing controls and future compliance obligations
• Promote a strong compliance and security culture through guidance, education, and pragmatic risk-based advice
Skills & Experience:
• Experience as an Information Security Governance Analyst is necessary for this role.
• Strong working knowledge of PCI DSS (scoping, requirements, validation
methods, evidence expectations)
• Ability to interpret control intent and apply it pragmatically in real environments
• Understanding of risk-based assurance and control effectiveness
• General understanding of IT infrastructure, cloud services, networks, and
application architecture
• Familiarity with payment environments, including POS, ecommerce platforms,
payment gateways, tokenisation, and third-party service providers
• Ability to read and critique technical evidence (e.g. firewall rules, vulnerability
scans, access logs)
• Experience performing gap analyses, control testing, and evidence reviews
• Strong attention to detail with the ability to spot control weaknesses or
inconsistencies
• Ability to work effectively with IT, Security, POS, Infrastructure, DevOps, and
suppliers
• Confident communicator who can explain compliance requirements to
non-specialists
• Capable of producing clear assurance reporting for senior stakeholders
• Experience working in PCI DSS compliance, IT security assurance, audit, GRC, or
risk management
• PCI Professional (PCIP) (highly desirable)
• ISO 27001 foundation / lead implementer / lead auditor
• CISM, CISSP, CRISC, or similar (beneficial, not always required)
Selfridges
PCI Assurance Analyst • London, UK
YouLend is the preferred global embedded financing platform for many of the world's leading e-commerce sites, tech companies and payment services providers such as Amazon, eBay, Shopify, Mollie, Do... Show more
A leading insurance firm in the United Kingdom is seeking an Exposure Management Analyst to support their team in analyzing catastrophe exposures and risks.The role includes ensuring compliance wit... Show more
The Agentic Technical/Business Analyst will support a Data Governance & Controls program for a top-tier banking client.Responsible for translating regulatory and governance policies (GDPR, CCPA, HI... Show more
Poutrix is seeking a Senior Cost Consultant to support assurance reviews on major programs, focusing on NEC3/NEC4 contracts.You will apply QS skills and digital tools to validate costs, strengthen ... Show more
A leading recruitment firm is looking for an experienced Business Analyst to support a strategic data integration project within a cloud-based Azure environment.The role focuses on data mapping, AP... Show more
Reinsurance Technology Analyst – Synpulse.As a reinsurance technology specialist, you will work globally with leading reinsurance clients, bridging the gap between business stakeholders, technical ... Show more
Howden Reinsurance Brokers Limited (UK) is seeking an experienced practitioner to deliver actuarial and analytical solutions across its various businesses, including Insurance and Reinsurance.The r... Show more
Broadridge Financial Solutions is seeking a PMO Governance Analyst in London.The role involves ensuring all projects adhere to the PMO governance framework, conducting governance reviews, and produ... Show more
Catastrophe Risk Analyst - Speciality Risk Insurance, Marine/Terrorism, Actuarial Analysis, Pricing, Underwriting Support, Analytics and Reporting.Contract 6-Months, Inside IR35 (Agency Payroll or ... Show more
A financial services provider in London is seeking an Onboarding Analyst to perform KYC checks and risk assessments on customer applications.The ideal candidate has over 2 years of experience in KY... Show more
Airwallex is seeking a Global Lead of Risk Assurance to build and lead their second line risk assurance capability across the US and EMEA.This Senior Director role requires strong auditing and tech... Show more
At Gallagher Re, we bring clarity to complexity by helping clients around the world make confident, data-driven decisions in a rapidly evolving risk landscape.Here, you’ll be part of a team that le... Show more
Capitalontap is looking for a Senior/Lead Card Fraud Data Analyst to work in a hybrid environment in London.This high-ownership role will involve taking direct responsibility for fraud systems, inc... Show more
Our client, a leading international law firm, is seeking a talented individual to join their Information Security Team in London on a fixed-term contract.This role offers the chance to help maintai... Show more
I am currently searching for an Enterprise Risk Analyst to support the head of the team in the design, implementation, and ongoing assessment of robust capital processes.You will assist in annual I... Show more
Wise is seeking a Lead Product Analyst to join the Financial Crime Platform team.You will partner with Financial Crime and KYC product teams to ensure data-driven growth decisions while helping com... Show more
VirtueTech Recruitment Group is seeking a Business Analyst specialized in Trade Surveillance for a cross-asset trading house in Greater London.You will support the design and enhancement of surveil... Show more
We are recruiting for a Technical Assurance Manager to join the HS2 Track infrastructure project at the initial design phase which will run concurrently with the completion of main works contracts,... Show more
A global insurance consulting firm is seeking a Business Analyst with DORA programme experience in London.This hybrid role requires onsite work 3 days a week.Responsibilities include supporting the... Show more
OFS Greater London, England, United Kingdom.Location: United Kingdom (Hybrid).Contract Type: 6-Month Contract (Potential Extension).A leading Fintech Banking company is seeking a skilled Credit Ris... Show more
){kind=logo}
