
Information Security & GRC Specialist
About us
At Vix Technology, we're bringing people, technology and services together to make transport work better for everyone. Operating across international markets, we connect and simplify complex transport systems, giving operators the clarity, control and confidence to run better mobility and create simpler, more connected experiences for passengers.
Our goal is simple: better systems, better outcomes and transport that works as one. It's our people who make that possible.
We value those who take ownership, work well with others and aren't afraid to question the default. You'll have the opportunity to contribute your expertise, solve meaningful challenges and work alongside people who share your ambition to build great solutions and make a difference.
The Opportunity
You'll take day-to-day ownership of our Information Security Management System (ISMS), helping ensure Vix remains compliant, audit-ready and continually improving.
Working across Security, Engineering, Technology and the wider business, you'll coordinate ISO 27001 activities, prepare for internal and external audits, manage evidence and help drive remediation actions through to completion.
You'll also gain exposure to PCI DSS and wider security frameworks, supporting customer assessments, regulatory requirements and security assurance activities.
This isn't a role where you'll simply identify gaps and write reports. We want someone who can build relationships across the business, translate security requirements into practical actions and help get things fixed.
What You'll Be Doing
- Own the day-to-day coordination and continuous improvement of our ISMS.
- Support ISO 27001 certification, surveillance and internal audits.
- Coordinate audit evidence and work with stakeholders to close findings and remediation actions.
- Maintain security policies, procedures, controls and compliance documentation.
- Support PCI DSS and wider security compliance and assurance activities.
- Track and report on compliance status, risks, upcoming audits and outstanding actions.
- Help develop our approach across ISO 27017, ISO 27018 and ISO 22301.
About you
You'll have practical experience working with ISO 27001 and an ISMS, ideally including audit preparation, evidence management and remediation.
You'll understand information security governance, risk and compliance and be confident working with both technical and non-technical teams.
You'll be organised, pragmatic and comfortable taking ownership. Just as importantly, you'll be able to explain security requirements clearly and build relationships with the people responsible for implementing them.
Experience with PCI DSS, security audits, ISO 27017/27018/22301 or working within a regulated technology environment would be a bonus.
Qualifications such as ISO 27001 Lead Implementer/Auditor, CISA, CRISC or CISSP are welcome, but they're not essential.
Why Vix?
You'll work on security that has genuine real-world impact, protecting technology behind public transport and payment systems used by millions of passengers.
You'll join an international security organisation, work with colleagues around the world and build your experience across GRC, ISO 27001, PCI DSS, risk, audit and assurance.
If you're looking for a role where you can take ownership, continue developing and make a visible difference to how security is managed, we'd love to hear from you.
Make the Connection. Help Keep the Technology That Moves People Secure.
What we offer
Join Vix Technology and be part of a global team making transport work better. You’ll work with talented people to solve real-world challenges in a culture that values collaboration, ownership, fresh thinking and putting customers first.
Alongside this, we offer a range of benefits designed to support you at work and beyond.
- 25 days holiday plus 8 bank holidays
- Pension Scheme
- Health Insurance
- Employee Assistance Program
- Death in Service and Life Assurance schemes
- Cycle Scheme
- EV Car Scheme
- Discounts platform
- Long Service Awards
- Referral Bonus
Equal Opportunities
Vix Technology is committed to a workplace where everyone is treated with dignity, respect, fairness and inclusion. We value diversity of background, experience and perspective and are committed to equal opportunity, with employment decisions based on merit.
If you need an adjustment or support at any stage of the recruitment process, please let us know.
No applications from agencies, please! Any introductions will be considered gifts.
Create a Job Alert
Interested in building your career at Vix Technology? Get future opportunities sent straight to your email.
Apply for this job
*
indicates a required field