> Markdown version of [/jobs/ext/4594787-senior-security-consultant-pci-dss](https://www.wearedevelopers.com/jobs/ext/4594787-senior-security-consultant-pci-dss). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Consultant - PCI DSS

- **Company:** Bridewell
- **Location:** London, United Kingdom
- **Experience:** Expert
- **Salary:** £49,804
- **Contract:** Permanent contract
- **Skills:** Cyber Security, PCI Data Security Standards, Cloud Platform System
- **Published:** November 6, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5954497933

## About the Role

We're looking for a Senior Security Consultant with a strong focus on PCI DSS to join our growing Cyber Security Consulting practice.

You'll have experience delivering client-facing cyber security and compliance engagements, with particular knowledge of PCI DSS and payment security environments.

Alongside PCI DSS, you'll have broader cyber security knowledge and experience across areas such as ISO 27001, NIST, NCSC CAF, cyber risk management and security assessments. This broader experience is important in our consulting roles and mirrors the expectations of our existing Senior Consultant positions.

You'll be comfortable engaging with stakeholders at all levels, from technical specialists through to senior leadership, and able to build strong, trusted client relationships while delivering consistently high-quality work., You will need to have experience in:

 * Delivering PCI DSS consultancy, compliance or assessment engagements.

 * Good working knowledge of PCI DSS and its application within real-world payment environments.

 * Conducting PCI DSS scoping exercises, gap assessments and readiness reviews.

 * Working with other security frameworks such as ISO27001, NIST and NSCS CAF.

 * Conducting cyber security risk assessments and managing risk and remediation activities.

 * Assessing organisations against security standards and frameworks.

 * Working with technical teams to understand infrastructure, networks, applications, cloud environments and security controls.

 * Producing clear, accurate and professional client documentation.

 * Communicating with stakeholders at different levels, including technical teams, security leadership and senior business stakeholders.

It would be great if you also have:

 * Experience working within highly regulated industries such as Critical National Infrastructure , financial services or retail.

 * Exposure to complex payment architectures, cloud environments, third-party payment providers or e-commerce environments.

 * Experience supporting or working alongside a Qualified Security Assessor (QSA).

 * Experience contributing to PCI DSS Reports on Compliance (RoCs), Attestations of Compliance (AoCs), Compensating Control Worksheets (CCWs) or Customised Approach documentation.

 * Relevant cyber security or audit certifications such as CISSP, CISM, CISA, ISO 27001 Lead Implementer or ISO 27001 Lead Auditor.

 * An ambition to develop towards QSA status, where appropriate.

## Description

Your primary focus will be supporting and delivering PCI DSS consultancy engagements, working with organisations to understand their payment environments, define scope and achieve and maintain compliance. Alongside this, you will support other engagements across Consulting in areas such as ISO27001, NIST, NCSC CAF, Risk Management and security maturity.

Your responsibilities will include:

 * Delivering PCI DSS engagements across merchant and service provider environments, including assessment and non-assessment activities.

 * Delivering wider cyber security consulting engagements across areas such as ISO 27001, NIST, NCSC CAF, risk management and security maturity.

 * Conducting PCI DSS gap assessments, readiness reviews and compliance assessments.

 * Assessing business processes, technology and operational controls against PCI DSS requirements.

 * Reviewing complex technical environments including traditional infrastructure, public and private cloud, third-party services and modern application environments.

 * Supporting the production of high-quality PCI DSS documentation and deliverables, including assessment evidence, remediation plans and, where appropriate, RoC and AoC documentation.

 * Supporting clients with PCI DSS v4.x requirements, including the use of Compensating Controls and the Customised Approach where appropriate.

 * Providing practical remediation advice, helping clients translate PCI DSS requirements into achievable technical and operational improvements.

 * Supporting the leadership and sales teams with proposals, tenders and pre-sales activity.

 * Quality assuring the work of other consultants where appropriate.