Senior Security Expert

About the role

Adyen is on the lookout for a dedicated Senior Security Expert to take charge of the security and certification framework for our In-Person Payments infrastructure. This role is pivotal in overseeing the PCI certification portfolio, ensuring that our global payment solutions adhere to compliance standards while providing essential support to our engineering teams. The ideal candidate will possess a strong background in security compliance and be adept at navigating complex certification processes.

Key facts

What you'll do

• Spearhead the PCI certification processes, including but not limited to PIN/KMO, P2PE, PTS, MPoC, and SSF, ensuring adherence to industry standards.
• Keep a comprehensive and up-to-date inventory of all hardware, software, and solution-level certifications to facilitate compliance tracking.
• Vigilantly monitor re-evaluation timelines and certification expiry dates, preparing engineering teams for upcoming audit cycles.
• Cultivate and manage relationships with external assessors and Qualified Security Assessors (QSAs), coordinating necessary interviews and documentation for audits.
• Offer compliance-driven insights during threat modeling and vulnerability assessment sessions, ensuring security considerations are integrated into engineering practices.
• Oversee the management of all documentation related to audits, including data flow diagrams and asset inventories, to maintain a clear compliance trail.
• Actively engage in PCI Security Standards Council working groups, representing Adyen and contributing to the evolution of industry standards and practices.
• Collaborate with cross-functional teams to ensure that security compliance is woven into the fabric of product development and engineering efforts.
• Conduct training and awareness sessions for internal teams to enhance understanding of compliance requirements and best practices.
• Analyze and report on compliance metrics to senior management, providing insights into the effectiveness of current security measures.
• Stay abreast of the latest developments in security compliance and payment technologies, ensuring that Adyen remains at the forefront of industry standards.
• Lead initiatives to streamline compliance processes, enhancing efficiency and reducing time to certification.

Requirements

• Extensive knowledge of PCI frameworks, including PIN/KMO, P2PE, PTS-POI, MPoC, and SSF, with a proven track record in compliance management.
• Demonstrated experience in managing intricate compliance pipelines and coordinating multiple external assessments simultaneously.
• Strong ability to articulate technical compliance requirements to both hardware and software engineering teams, bridging the gap between security and development.
• High degree of autonomy in project management, with the capability to track deadlines and deliver results without direct supervision.
• Excellent verbal and written communication skills, enabling effective interaction with both technical and non-technical stakeholders.
• Proven problem-solving skills and a proactive approach to identifying and addressing compliance challenges.

Nice to have

• PCI ISA certification, which would enhance your credibility and expertise in the field.
• Familiarity with agile methodologies and their application in compliance projects.
• Experience in working within a fast-paced, dynamic environment, adapting quickly to changing priorities.

Skills & tools

• Proficiency in PCI Standards (PIN/KMO, P2PE, PTS, MPoC, SSF)
• Strong compliance project management capabilities
• Effective stakeholder management skills
• Expertise in creating and maintaining technical documentation

Practical notes

• Adyen operates with an office-first approach and does not offer positions that are exclusively remote.
• We strive to respond to all applications within a timeframe of five business days.
• The typical duration of our interview process is around four weeks, allowing for thorough evaluation and consideration.
• The internal job title for this position is Senior Security Certifications Expert, reflecting the specialized nature of the role.

Join us at Adyen, where you can make a significant impact on the security landscape of our payment solutions while working in a collaborative and innovative environment. If you are passionate about security compliance and eager to contribute to a leading global payment platform, we encourage you to apply.

About the company

Adyen is a financial technology platform providing end-to-end payments infrastructure, data analytics, and financial products. Founded by Pieter van der Does and Arnout Schuijff in 2006, Adyen went public on Euronext Amsterdam in 2018. Its clients include Meta, Uber, Spotify, and Microsoft.