Swindon/London – Hybrid
Objective:
You will support the Information Security function across PayTech by coordinating and improving compliance activities, helping ensure that security controls remain effective, evidenced, and aligned to regulatory, client, and internal requirements. The role partners with business, technology, audit, and group stakeholders to drive practical compliance outcomes across PCI DSS, DORA, and other regulatory and risk frameworks, internal control assurance, security awareness compliance, and client due diligence activity.
Crucial to this role is helping maintain PayTech's ability to demonstrate that security controls operate in practice, not only on paper, and that identified gaps are tracked, escalated, and supported through to closure. The role also helps improve confidence in PayTech's security posture by supporting internal audit requirements and responding to client security questionnaires and audits in a structured, repeatable way.
Responsible for:
The Compliance Analyst is responsible for supporting the day-to-day operation of PayTech's security compliance activities. This includes maintaining evidence and documentation, assisting with PCI DSS readiness, coordinating responses to internal audit and client assurance requests, owning the security awareness programme and activities, liaising with our learning teams and wider group functions to maintain the content and ensure it’s delivery, and helping track remediation actions across the business. The role works closely with the rest of the PayTech information security team, technology teams, and group functions to ensure that compliance activity leads to measurable risk reduction and operational improvement.
Promote the use of standard frameworks and consistent evidence practices so that PayTech can meet immediate PCI DSS and audit obligations while improving compatibility with wider regulatory, group, and client assurance expectations. This includes maintaining clear records and minutes, repeatable processes, and practical reporting that supports internal governance and external assurance activity.
Strong experience in information security compliance, IT audit, risk, governance, or a related control assurance role.Practical experience supporting compliance or assurance activity against at least one recognised framework such as PCI DSS, ISO 27001, SOC 2, or similar.Experience coordinating evidence collection and working with control owners, auditors, or business stakeholders.Experience maintaining structured documentation, trackers, and records to support audit or compliance requirements.Ability to work across multiple teams to follow up actions, clarify requirements, and keep activity moving.Strong written communication skills for drafting policies, procedures, evidence summaries, and questionnaire responses.Experience in financial services, FinTech, payments, or another regulated environment.Exposure to internal audit processes, client due diligence questionnaires, or external client assurance reviews.Experience supporting security awareness campaigns, training compliance, or policy attestation processes.Familiarity with Jira, Confluence, Excel, ticketing systems, and evidence repositories.Certifications (desirable, not mandatory):
PCI-related training or assessor/audit exposure.ISO 27001 Foundation, Internal Auditor, or Lead Implementer.CISA, CRISC, or equivalent governance / audit certification pathway.Security+, ISC2 CC, or similar entry-level security certification.Strong organisation and attention to detail, with the ability to keep documentation accurate, current, and audit ready.Good stakeholder coordination skills and the confidence to follow up actions with teams across business and technology functions.Ability to explain compliance requirements in clear, practical language and translate requests from auditors or clients into actionable asks.Solid reporting capability, including maintenance of dashboards, metrics, evidence trackers, and status updates.Ability to handle sensitive information professionally and maintain confidentiality in client, audit, and internal matters.Continuous improvement mindset, helping standardise recurring compliance tasks and reduce manual overhead.
