IT Security Manager

Moto
Toddington, UK
12 days ago
Apply on www.adzuna.co.uk
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Compensation
£59,689.0
Working hours
Regular working hours

Tech stack

Software System Penetration Testing Cloud Computing Security Cyber Security PCI Data Security Standards Security Information and Event Management Vulnerability Analysis

Job description

  • Lead and continuously improve Moto’s cyber security strategy, policies and controls.
  • Monitor emerging threats and ensure effective security measures are in place across our infrastructure and systems.
  • Own security incident response activities, from investigation through to remediation.
  • Manage vulnerability assessments and penetration testing programmes.
  • Lead our Tier 1 PCI-DSS compliance programme and annual audit process.
  • Act as the key contact for auditors and assessors.
  • Maintain security documentation, evidence and compliance records.
  • Conduct risk assessments and manage the security risk register.
  • Deliver security awareness initiatives across the business.
  • Manage relationships with third-party suppliers, auditors and security partners.

Requirements

We’re looking for someone who combines technical expertise with the ability to engage and influence stakeholders across the business.

You’ll have:

  • Significant experience in IT or Cyber Security with direct ownership of PCI-DSS compliance.
  • Strong knowledge of security frameworks and controls.
  • Experience managing security incidents, vulnerabilities and remediation programmes.
  • Confidence working with senior stakeholders and external auditors.
  • The ability to work independently and take ownership of a broad security remit.
  • A practical, solutions-focused approach to managing risk while enabling business objectives.

It Would Be Great If You Also Have:

  • CISSP, CISM, CISA or similar security certifications.
  • Experience within retail, hospitality or payments environments.
  • Knowledge of cloud security technologies and modern security monitoring tools., If you’re passionate about cyber security, compliance and protecting business-critical systems, we’d love to hear from you.

Benefits & conditions

Hybrid - 2 days in our Toddington office or out visiting sites Ready to take ownership of security for one of the UK’s biggest motorway service operators?

At Moto, we’re committed to keeping our business, customers and colleagues safe. As our IT Security Manager, you’ll be at the heart of protecting our organisation from evolving cyber threats while leading our PCI-DSS compliance programme and driving security best practice across the business.

This is a hands-on role where you’ll have the autonomy to shape our security landscape, influence senior stakeholders, and make a tangible impact on how we manage cyber risk and compliance.

Why Join Us?

Bonus: Up to 20% bonus Time off: 25 days holiday Exclusive discounts: Up to 60% off for you, your partner, and loved ones Inclusive benefits: Enhanced maternity, paternity, pension, sick pay & life assurance Career development: Fantastic training opportunities, including funding for qualifications

About the company

Moto is the UK’s leading motorway services operator, serving millions of customers every year. Behind the scenes, our technology teams play a vital role in keeping our operations running smoothly, securely and efficiently.

Joining Moto means becoming part of a business that’s investing in technology, security and innovation. You’ll have the opportunity to lead key security initiatives, work with a wide range of stakeholders, and make a meaningful contribution to the future of the business.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.adzuna.co.uk
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

3:17 min

Embedding automated vulnerability analysis within CircleCI workflows

Milecia Mcgregor · LIVE

4:19 min

Differences between mobile infrastructure and application layer security

Moataz Nabil Moataz Nabil · LIVE

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

4:08 min

Securing data in use with confidential cloud computing

Isha Salania Isha Salania · World Congress 2026 Europe

3:55 min

Flaws in vague supply chain security advice

Adrian Mouat Adrian Mouat · World Congress 2025

Videos

See all

Related articles

See all