Senior Security Expert

• Lead the process: Take central ownership of PCI Certifications for our Payments Solution, encompassing DSS, PIN/KMO, P2PE, PTS, MPoC, and SSF
• Manage the portfolio: Maintain a comprehensive, up-to-date inventory of all PCI certifications across hardware devices, software applications, and solution-level certifications
• Plan proactively: Track expiry dates, re-evaluation windows, and delta certification triggers
• Collaborate with assessors: Act as the primary point of contact with QSAs and external assessors, managing timelines, preparing assessment materials, coordinating interviews, and navigating follow-up inquiries
• Partner with Engineering: Join vulnerability analysis and threat modeling sessions to provide practical, compliance-informed security guidance to engineers
• Maintain documentation: Take full ownership of all security documentation required for assessments (asset inventories, threat models, data flow diagrams, etc.), ensuring audit readiness year-round
• Engage with the industry: Represent Adyen at PCI SSC working groups and industry forums

• Deep subject matter expertise in PCI frameworks and standards such as DSS, PIN/KMO, P2PE, PTS-POI, MPoC, SSF
• Proven track record of orchestrating complex compliance pipelines, juggling multiple certifications, deadlines, and external assessors simultaneously
• Technically fluent enough to sit with hardware and software engineers, understand what they are building, and give them compliance guidance that is actually useful
• Build trust on both sides: QSAs trust you because you are organized and prepared
• engineers trust you because you make their lives easier
• Operate with high autonomy
• Strong communicator who can clearly present complex compliance concepts to technical and non-technical audiences alike

PCI ISA certification