Payments Compliance

**About Advantio**

Established in 2009, Advantio maintains an extensive team of consultants and security testing experts to provide digital security and assurance to its customers. Originally established as a payment compliance market leader, Advantio has grown from an established and leading payment security and compliance organisation in Europe to develop its comprehensive Cyber Security and Managed Security Services expertise - offering consultancy, products, and services to support organisations to first understand or their own cyber security related business risks and then by providing suitable and affordable solutions to manage those risks effectively and to remediate against threats proportionately. Advantio primarily serves the FinTech and Payment Card industries and is recognised by VISA as one of Europe’s top Qualified Security Assessor (QSA) providers.

**Role Mission**

To guarantee the achievement of Payments Compliance objectives including, but not limited to, achieving the gross profit margin target in the specific assigned region.

To plan budgets and resourcing in accordance with business needs.

To ensure high quality services exceeding customers’ expectations.

**Key Responsibilities**

Lead customer engagements and provide senior cyber security advice and services to a broad range of clients and industries. Provide detailed analytical reporting, internal reporting metrics and program management. Provide leadership and mentorship to Junior consultants.

**People Management**
- Sets professional goals and facilitating team members professional career path development.
- Facilitates internal tutoring and mentoring, personnel education and supports people with external and internal trainings.
- In cooperation with Customer Success, manages team’s project timelines, resources and deliverables for Payments Compliance projects considering specific skills needed to assign projects.
- Ensures that personal and team’s objectives are achieved.
- In cooperation with HR, supports the hiring process and develops individual development plans for team members, performs quarterly performance and development discussions for team members.

**Budgeting**
- Resources planning ad forecasting
- Monitoring economic indexes (GPM, EBITDA, team bonuses, etc.)

**Delivery**
- Prepares, organizes and supports delivery by team members of engagements offsite or at customer premises including but not limited to gap analysis, security assessment, risk and/or compliance assessment using one or more industry or regulatory standard or framework.

**Processes and Documentation**
- Assesses compliance related documentation including policies, procedures, standards and legislative directives.
- Delivers detailed reports following Advantio’s reporting best practice and templates.
- Ensure QA process for Payments Compliance standards is initiated and applied for relevant projects, in cooperation with QA and Backoffice team.
- In cooperation with Practice Lead(s), estimating, planning & monitoring team budget.
- Provide regular status update to internal stakeholders (Practice Lead(s), PMO).
- Participate in continuous improvement of internal processes (reporting tools, assessment automation etc.)

**Communication**
- Participates to external conferences and promotes Advantio by identifying important Industry events.
- Support marketing activities related to existing Professional Service portfolio and customer acquisition working in collaboration with marketing team.
- Act as a communication point between regional team, other professional services teams, Customer Success and other departments.
- Supports sales team in development and effort estimations for new opportunities (e.g. new and evolving industry standards).
- Stay up-to-date on developments in the Payments Compliance realm, understanding new standards and regulations and their impact on Advantio.

**Key Skills**
- Relevant Experience in Fintech industry and security standards & directives consultancy services (PCI DSS, PSD2, ISO 27001, SWIFT, etc.)
- Cryptography techniques including algorithms, key management, and key lifecycle.
- Public key infrastructure (PKI) and the role and operations of a Certification Authority (CA) and Registration Authority (RA)
- Hardware security modules (HSMs) operations, policies, and procedures
- POI key-injection systems and techniques including key-loading devices (KLDs) and key management methods, such as Master/Session or DUKPT
- Physical security techniques for high-security areas
- Authentication methods and techniques
- Security Integrity controls
- Computer Networking (routing, switching, firewall network filtering)
- Operating Systems hardening and administration (Linux/Unix, Windows).

**Core Competencies**
- Problem Solving (analysis, helicopter view, problem setting, decision making)
- Planning and Organization (time management, scheduling and control)
- Communication (clearness, listening, persuasion, negotiation,