Security, Risk & Compliance Architect (Payments Certification)

Brak informacji o wynagrodzeniu

MidZdalnieFull-time

#478957·Dodano 3 dni temu·1

Źródło: nofluffjobs.com

Aplikuj teraz

Tech Stack / Keywords

CryptographyPCI-MPOC / CPoC / SPoCPCI-DSSEMVCoHSMDUKPT / TR-31TokenizationFIME / Brightsight Lab CoordinationFraud Scoring / AML EnginesCode Obfuscation & Attestation

Podsumowanie oferty

You will establish security architecture for a merchant acquiring and SoftPOS transaction ecosystem for a next-generation European Digital Currency. You will safeguard its hardware and software stack and lead PCI-MPOC and EMVCo security approvals, covering the payment gateway and mobile terminals.

Wymagania

7+ years of experience in payment security architecture, cryptography engineering, or as a specialized technical lead navigating complex payment compliance frameworks.
Proven track record of taking at least two distinct software products through formal PCI-MPOC, CPoC, SPoC, or EMVCo certification cycles.
Expert-level knowledge of Hardware Security Modules (HSMs), Key Management Blocks (DUKPT, TR-31), tokenization schemas, secure attestation infrastructure, and code obfuscation tooling.
Direct experience coordinating formal security evaluations and penetration testing responses with accredited third-party laboratories such as FIME or Brightsight.
Strong architectural understanding of real-time fraud mitigation tools, risk scoring engines, and automated AML velocity checks.

Obowiązki

Establish end-to-end security architecture, threat modeling, data-at-rest and data-in-transit encryption standards, and tokenization frameworks across the payment gateway and mobile terminal landscape.
Own the compliance roadmap by mapping, documenting, and architecting the software structures required for formal PCI-MPOC, PCI-DSS, and EMVCo security approvals.
Act as the primary technical point of contact for external security evaluation laboratories, managing technical documentation, penetration testing responses, and certification tracking.
Architect integration points for real-time fraud mitigation tools, risk scoring engines, automated AML velocity checks, and operational security auditing dashboards.
Safeguard the hardware and software stack and shepherd the product through formal PCI-MPOC and EMVCo security approvals.

Benefity

Strategic leadership role bridging high-security payment cryptography with formal international certification pipelines.
Greenfield architecture without legacy constraints, shaping a flagship European Digital Currency infrastructure.

Emerge Soft Sp. z o.o.

6 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz