> Markdown version of [/jobs/ext/4000233-it-security-manager](https://www.wearedevelopers.com/jobs/ext/4000233-it-security-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Manager

- **Company:** Moto
- **Location:** Toddington, United Kingdom
- **Salary:** £59,716
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Cloud Computing Security, Cyber Security, PCI Data Security Standards, Security Information and Event Management, Vulnerability Analysis
- **Published:** October 29, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5944824252

## About the Role

We're looking for someone who combines technical expertise with the ability to engage and influence stakeholders across the business.

You'll have:

 * Significant experience in IT or Cyber Security with direct ownership of PCI-DSS compliance.
 * Strong knowledge of security frameworks and controls.
 * Experience managing security incidents, vulnerabilities and remediation programmes.
 * Confidence working with senior stakeholders and external auditors.
 * The ability to work independently and take ownership of a broad security remit.
 * A practical, solutions-focused approach to managing risk while enabling business objectives.

It Would Be Great If You Also Have:

 * CISSP, CISM, CISA or similar security certifications.
 * Experience within retail, hospitality or payments environments.
 * Knowledge of cloud security technologies and modern security monitoring tools., If you're passionate about cyber security, compliance and protecting business-critical systems, we'd love to hear from you.

## Description

* Lead and continuously improve Moto's cyber security strategy, policies and controls.
 * Monitor emerging threats and ensure effective security measures are in place across our infrastructure and systems.
 * Own security incident response activities, from investigation through to remediation.
 * Manage vulnerability assessments and penetration testing programmes.
 * Lead our Tier 1 PCI-DSS compliance programme and annual audit process.
 * Act as the key contact for auditors and assessors.
 * Maintain security documentation, evidence and compliance records.
 * Conduct risk assessments and manage the security risk register.
 * Deliver security awareness initiatives across the business.
 * Manage relationships with third-party suppliers, auditors and security partners.