Chief Information Security Officer

CISO Opportunity – Global Payments Leader (UK Based) MUST BE PCI DSS EXPERIENCED

My client, a rapidly scaling worldwide payments company, is seeking a dynamic and experienced Chief Information Security Officer (CISO) to lead their security strategy from their UK base. This is a fantastic opportunity to make a significant impact within a growing global organisation.

Key Responsibilities:

• Compliance & Standards Leadership: Champion and enforce PCI DSS adherence, alongside other crucial security standards like ISO 27001, across our global operations.
• External Stakeholder Management: Serve as the company's expert representative in discussions and audits with regulatory bodies and payment industry partners (Visa, Mastercard, etc.).
• Security Framework Development: Architect and implement comprehensive security policies, controls, and risk mitigation strategies spanning our acquiring, gateway, and payment processing infrastructure.
• Threat Management & Operations Oversight: Direct our security operations functions, including real-time fraud prevention, advanced threat detection (SIEM, IDS/IPS), and incident response capabilities.
• Point-of-Sale Security Focus: Drive and maintain robust security measures for POS environments, encompassing PIN encryption protocols, HSM (Thales) infrastructure, secure key loading processes, and terminal-level protection.
• International Security Adaptation: Strategically tailor our security programs to effectively address varying legal and regulatory demands in both Asian and European markets.

Requirements:

• Extensive track record in cybersecurity leadership roles within the financial technology, payments processing, or banking domains.
• Deep and demonstrable understanding of PCI DSS and PCI PIN frameworks, ISO 27001, and familiarity with relevant regional regulatory landscapes.
• Hands-on experience managing HSMs, implementing PIN encryption solutions, and securing point-of-sale transaction systems.
• Strong foundational knowledge of cloud security architectures, secure application development practices, and Security Operations Center (SOC) functions.
• Proven success in effectively articulating and advocating for security priorities to executive leadership and regulatory authorities.

…