Bureau and BASS Consultant

BACS Assurance Consultant, Nationwide (Remote), Permanent

This role provides the chance to oversee complex, evidence-based assurance across BASS and BABS, with room to shape assessments, engage senior stakeholders, and support ongoing improvement. It brings broad exposure to participants, sponsor banks, suppliers and Trust Service Providers, with meaningful responsibility for protecting the integrity and resilience of Bacs services.

Accountabilities

• Act as principal BASS/BABS adviser to internal functions, participants, sponsor banks, suppliers and Trust Service Providers; influence and constructively challenge senior management and directors.
• Carry out or support complex, high-risk or escalated assessments, bureau interventions, major changes, projects, post-incident reviews and non-compliance matters.
• Judge control effectiveness, evidence, residual risk, remediation and assurance outcomes; track actions, escalate material or overdue issues and support enforcement.
• Maintain proportionate frameworks, work programmes, assessment materials and assurance statements addressing cloud services, concentration risk, aggregators and emerging technologies.
• Produce decision-ready management information, executive papers, assurance reports and progress updates.
• Coach and technically support inspectors and colleagues; address recurring weaknesses and improve assessment consistency, quality and efficiency.
• Deputise for the Senior Manager, Bureau at senior committees, participant decision meetings and key supplier engagements.

Qualifications, Skills and Experience

• Payments, cyber assurance, IT audit, technology risk, security compliance or supplier assurance.
• Lead audits, inspections or assurance reviews; test control design and operation, sample reliable, current and applicable evidence, assess compensating controls and residual risk, document defensible findings and remediation.
• Experience with PKI, Certificate Authorities, digital signatures and certificate/key lifecycles: ceremonies, dual control, separation of duties, backup, recovery, rotation, revocation and destruction. Working knowledge of HSMs, cryptographic operations, privileged administration and key protection.
• Assess architectures, network boundaries, data flows, trust relationships, APIs, identity services, cloud/hosted services, tenant segregation and third-party dependencies.
• Assess IAM/PAM, vulnerability/patch management, network security, monitoring, incidents, secure development, change/releases, operational resilience, business continuity and disaster recovery.
• Assess supply-chain, subcontractor, fourth-party and concentration risks; evaluate the scope, applicability, findings and limitations of ISO/IEC 27001, Cyber Essentials Plus, SOC 1/SOC 2, PCI DSS and ISO 22301 assurance.
• Communicate technical and risk matters clearly to suppliers, senior stakeholders and committees; demonstrate organization, analysis, problem-solving and judgement while managing competing priorities and deadlines.
• Must be willing to travel (nationally), including overnight stays as required.

Pay.UK Behaviours

At Pay.UK, our behaviours are central to who we are and how we operate. They bring our values to life, shape our culture, and guide how we make decisions, collaborate, and respond to challenges across the payments ecosystem. All interview processes will assess the following behaviours:

• Listen to Find Win-Wins - Empathy, Listening and Understanding
• Influence with Courage - Influence, Courage
• Go Horizontal First - Cross Boundary Collaboration
• Take Ownership - Self Development
• Opportunity Mindset - Initiative
• Simplify - Achievement Orientation

Inclusivity

At Pay.UK, we value diversity and inclusivity. Research has shown that candidates from underrepresented groups may hesitate to apply unless they meet all the requirements listed. We encourage all qualified candidates to apply, regardless of how closely their skills and experience match the requirements. We are committed to supporting accessibility needs and creating a welcoming environment for all employees. Become part of our team and contribute to the creation of an inclusive work environment that values everyone's unique input.

Who we are

Pay.UK is the recognised operator and standards body for the UK's interbank retail payment systems. We provide the infrastructure and services that millions of people and businesses rely on every day, including Bacs, Faster Payments and the Image Clearing System for cheques, the Current Account Switch Service and Confirmation of Payee. Together, these services help keep money moving safely, securely and reliably across the UK and play an important role in supporting the economy.

In 2025, the UK's retail payment systems processed more than 12.5 billion transactions worth over £11 trillion. Since its launch in 2013, the Current Account Switch Service has successfully helped consumers and businesses switch more than 12 million current accounts. These services help people receive their salaries, pay their bills, make payments and manage their finances with confidence.

Our purpose is to provide the trusted infrastructure, standards and services that underpin UK retail payments. We deliver safe, resilient and efficient payment systems while working collaboratively with industry, regulators and stakeholders to strengthen resilience, tackle fraud, improve access and support innovation across the payments landscape. As the ecosystem evolves, we are continuing to develop our capabilities in areas such as data and AI, enhancing operational insight and helping to build a modern, trusted payments ecosystem.

Learn more about life at Pay.UK by hearing what employees have to say, click here to view videos .

Benefits & additional information

• 12% Non-contributory pension
• Discretionary annual bonus
• 30 days annual leave (excluding bank holidays)
• Private medical insurance, life assurance, income protection, health cash plan, dental insurance, Bupa medicals etc
• Employee assistance programme
• Cycle to Work Scheme
• Season ticket loan
• Company funded fitness & wellbeing subscription
• Working from home policy - minimum 40% in the office (eg. 2 days in the office over a 5 day working week)

Please note:

• Some of our benefits are only available to colleagues after meeting the requirements of the probationary period

-

Pay.UK employee benefits are not available to contractors and are only available to permanent and fixed-term employees