Senior Security Expert

This is Adyen

Adyen provides payments, data, and financial products in a single solution for customers like Meta, Uber, H&M, and Microsoft - making us the financial technology platform of choice. At Adyen, everything we do is engineered for ambition.

For our teams, we create an environment with opportunities for our people to succeed, backed by the culture and support to ensure they are enabled to truly own their careers. We are motivated individuals who tackle unique technical challenges at scale and solve them as a team. Together, we deliver innovative and ethical solutions that help businesses achieve their ambitions faster.

Senior Security Expert

We are looking for a highly proactive and organized Senior Security Expert to join our In-Person-Payments (IPP) Security & Certifications team. Adyen's In-Person Payments platform is one of the most complex payment infrastructures in the world, processing billions of euros annually across tens of thousands of merchant locations globally. The Payment Solution is the engine behind it all, governing the payment processing, certified hardware, and the software that keeps every transaction compliant, secure, and trusted by global payment schemes. The IPP Security & Certifications team is the function that keeps this infrastructure compliant, certified, and trusted by global payment schemes.

This is a high-stakes, high-autonomy role where you will take genuine ownership of the PCI certification portfolio that underpins this infrastructure. Your success will not be measured by writing code or implementing fixes, but rather defined by knowing the landscape better than anyone in the room, aligning the right stakeholders, and ensuring nothing falls through the cracks. If you treat a compliance deadline as a problem to solve six months in advance, and can walk an engineering team through a PCI requirement and a QSA through an engineering decision with equal confidence — this role was built for you.

What you’ll do

• Lead the process: Take central ownership of PCI Certifications for our Payments Solution, encompassing DSS, PIN/KMO, P2PE, PTS, MPoC, and SSF.
• Manage the portfolio: Maintain a comprehensive, up-to-date inventory of all PCI certifications across hardware devices, software applications, and solution-level certifications.
• Plan proactively: Track expiry dates, re-evaluation windows, and delta certification triggers. Anticipate deadlines, engage leadership, and ensure engineering teams are prepared well in advance of audit cycles.
• Collaborate with assessors: Act as the primary point of contact with QSAs and external assessors, managing timelines, preparing assessment materials, coordinating interviews, and navigating follow-up inquiries.
• Partner with Engineering: Join vulnerability analysis and threat modeling sessions to provide practical, compliance-informed security guidance to engineers. Translate compliance requirements i