IT Security Manager
💷 Competitive salary
⏳ 37.5 hours per week
🏠 Hybrid – 2 days in our Toddington office or out visiting sites
At Moto, we're committed to keeping our business, customers and colleagues safe. As our IT Security Manager, you'll be at the heart of protecting our organisation from evolving cyber threats while leading our PCI-DSS compliance programme and driving security best practice across the business.
This is a hands-on role where you'll have the autonomy to shape our security landscape, influence senior stakeholders, and make a tangible impact on how we manage cyber risk and compliance.
Why Join Us?
✅ Bonus: Up to 20% bonus
✅ Time off: 25 days holiday
✅ Exclusive discounts: Up to 60% off for you, your partner, and loved ones
✅ Inclusive benefits: Enhanced maternity, paternity, pension, sick pay & life assurance
✅ Career development: Fantastic training opportunities, including funding for qualifications
Your Responsibilities
Lead and continuously improve Moto's cyber security strategy, policies and controls.
Monitor emerging threats and ensure effective security measures are in place across our infrastructure and systems.
Own security incident response activities, from investigation through to remediation.
Manage vulnerability assessments and penetration testing programmes.
Lead our Tier 1 PCI-DSS compliance programme and annual audit process.
Act as the key contact for auditors and assessors.
Maintain security documentation, evidence and compliance records.
Conduct risk assessments and manage the security risk register.
Deliver security awareness initiatives across the business.
Manage relationships with third-party suppliers, auditors and security partners.
What You’ll Bring
We're looking for someone who combines technical expertise with the ability to engage and influence stakeholders across the business.
You'll have:
Significant experience in IT or Cyber Security with direct ownership of PCI-DSS compliance.
Strong knowledge of security frameworks and controls.
Experience managing security incidents, vulnerabilities and remediation programmes.
Confidence working with senior stakeholders and external auditors.
The ability to work independently and take ownership of a broad security remit.
A practical, solutions-focused approach to managing risk while enabling business objectives.
CISSP, CISM, CISA or similar security certifications.
Experience within retail, hospitality or payments environments.
Knowledge of cloud security technologies and modern security monitoring tools.
Moto is the UK's leading motorway services operator, serving millions of customers every year. Behind the scenes, our technology teams play a vital role in keeping our operations running smoothly, securely and efficiently.
Joining Moto means becoming part of a business that's investing in technology, security and innovation. You'll have the opportunity to lead key security initiatives, work with a wide range of stakeholders, and make a meaningful contribution to the future of the business.
If you're passionate about cyber security, compliance and protecting business-critical systems, we'd love to hear from you.
Join Moto and help us build a secure future for our colleagues, customers and business. 🚀
INDCS
Lead the development and delivery of Scotland’s Ecological Clerk of Works service, growing client relationships and project opportunities while providing technical assurance and building team capability.
Lead the development and delivery of Scotland’s Ecological Clerk of Works service, growing client relationships and project opportunities while providing technical assurance and building team capability.
Oversee payment operations across a client portfolio, ensuring accurate, timely and compliant processing while supporting team development, risk management and continuous improvement.
Leads regional safety, health, and environmental programs by assessing work sites, managing incidents, improving safety procedures, and coaching teams to deliver safe and healthy work.
Leads provider network contracting strategy and operations, oversees contract management and key contracting initiatives, and develops team performance while partnering with providers and internal stakeholders.
