Senior Security Consultant - PCI DSS

One of the most exciting prospects in the UK cyber security sector today, Bridewell is a leading cyber security services company specialising in protecting and transforming critical business functions for some of the world’s most trusted organisations. We are the trusted partner for operators of essential services and provide end-to-end cyber security capabilities that help our clients overcome their security challenges, allowing them to operate safely and securely. 

Bridewell holds the Gold level, Investors in People award which we feel solidifies and reflects the outstanding calibre of our people and what makes us truly One Team.  

Who are we looking for? 

We’re looking for a Senior Security Consultant with a strong focus on PCI DSS to join our growing Cyber Security Consulting practice. 

You’ll have experience delivering client-facing cyber security and compliance engagements, with particular knowledge of PCI DSS and payment security environments.  

Alongside PCI DSS, you’ll have broader cyber security knowledge and experience across areas such as ISO 27001, NIST, NCSC CAF, cyber risk management and security assessments. This broader experience is important in our consulting roles and mirrors the expectations of our existing Senior Consultant positions.  

You’ll be comfortable engaging with stakeholders at all levels, from technical specialists through to senior leadership, and able to build strong, trusted client relationships while delivering consistently high-quality work. 

What you’ll be doing 

Your primary focus will be supporting and delivering PCI DSS consultancy engagements, working with organisations to understand their payment environments, define scope and achieve and maintain compliance. Alongside this, you will support other engagements across Consulting in areas such as ISO27001, NIST, NCSC CAF, Risk Management and security maturity. 

Your responsibilities will include: 

• Delivering PCI DSS engagements across merchant and service provider environments, including assessment and non-assessment activities. 

• Delivering wider cyber security consulting engagements across areas such as ISO 27001, NIST, NCSC CAF, risk management and security maturity. 

• Conducting PCI DSS gap assessments, readiness reviews and compliance assessments. 

• Assessing business processes, technology and operational controls against PCI DSS requirements. 

• Reviewing complex technical environments including traditional infrastructure, public and private cloud, third-party services and modern application environments. 

• Supporting the production of high-quality PCI DSS documentation and deliverables, including assessment evidence, remediation plans and, where appropriate, RoC and AoC documentation. 

• Supporting clients with PCI DSS v4.x requirements, including the use of Compensating Controls and the Customised Approach where appropriate. 

• Providing practical remediation advice, helping clients translate PCI DSS requirements into achievable technical and operational improvements. 

• Supporting the leadership and sales teams with proposals, tenders and pre-sales activity. 

• Quality assuring the work of other consultants where appropriate.