Senior Security Program Manager

United States Digital Space LLC; Amsterdam; On-site; EUR 110,000 - 150,000; Full time

Job summary

United States Digital Space LLC seeks a Senior Security Program Manager to join the Tech Regulatory team in Amsterdam. You will ensure products comply with security laws, engage with cross-functional teams, and manage multiple compliance programs including PCI-DSS and PCI 3DS.

The role emphasizes first-line ownership, translating complex requirements into actionable programs, and maintaining awareness of global obligations. Office-based in Amsterdam.

Qualifications

• 5+ years of experience implementing security compliance, tech operations management, or risk in a fast-growing company.
• Experience in security engineering/GRC with PCI-DSS and PCI 3DS domain experience.
• Proven first-line owner embedded in operational reality.

Responsibilities

• Program management across domains, incl. PCI-DSS and PCI 3DS certifications.
• Define standards and ensure regulatory frameworks withstand scrutiny.
• Translate regulatory requirements into actionable designs for engineering teams.

Skills

Security compliance

GRC

Operational risk management

Security program management

Regulatory engagement

Education

Bachelor's degree in a relevant field

Tools

PCI-DSS toolkit

PCI 3DS tools

Job description

This is the company

the company provides payments, data, and financial products in a single solution for customers like Meta, Uber, H&M, and Microsoft - making us the financial technology platform of choice. At the company, everything we do is engineered for ambition.

For our teams, we create an environment with opportunities for our people to succeed, backed by the culture and support to ensure they are enabled to truly own their careers. We are motivated individuals who tackle unique technical challenges at scale and solve them as a team. Together, we deliver innovative and ethical solutions that help businesses achieve their ambitions faster.

Senior Security Program Manager

the company is looking for a Security Program Manager to join the Tech Regulatory team within the first line of defense. The Tech Regulatory team ensures that the platform is secure, reliable and compliant with all global regulatory requirements. As a Security Program Manager, you are responsible for ensuring that our products and services comply with security regulations and laws. You actively engage, bring together, and communicate with people from various teams to be successful in ensuring continued compliance of products and services and you manage multiple security compliance programs such as PCI-DSS and PCI 3DS.

What you'll do

• Program Management: Manage programs across multiple domains - for example responsible for program managing the PCI-DSS and PCI 3DS certifications in addition to supporting security on regulatory requirements surrounding a broad set of security risk domains for example security detection and monitoring, data loss prevention, vulnerability management and three core operational risk domains as your team’s core anchor: Incident Management, Change Management, and Business Continuity Management

• Defining standards and ensuring frameworks withstand internal and external scrutiny

• Operational Design: Translate complex regulatory requirements into actionable operational program designs that engineering teams can implement.

• Documentation: Plan, write, and implement process documents and enablement materials that work for diverse audiences including operational teams, leadership, auditors, and regulators.

• Cross-functional Coordination: Align and provide input to roadmaps and programs across enterprise risk, security, and the broader technology organization.

• Regulatory Alignment: Oversee regulatory frameworks such as DORA and other DNB mandates, and maintaining awareness of obligations across our other global regions (e.g., OCC, MAS TRM, RBI, BNM).

Who you are

• Demonstrated background and 5+ years experience in implementing security compliance, tech operations management, security and technology risk, or a closely adjacent discipline within a fast-growing company, ideally in financial services or payments.

• Experience in security engineering/GRC roles with prior PCI-DSS and 3DS domain experience.

• Proven experience as a first-line owner who is embedded in operational reality.

• Ability to manage complex operational risk domains simultaneously, specifically Incident Management, Change Management, and Business Continuity Management.

• Strong written communication skills, capable of explaining concepts and producing artifacts that satisfy both technical and non-technical stakeholders.

Preferred requirements

• Working knowledge of regulatory and compliance standards (DORA, PCI-DSS, PCI 3DS, ISO 27001, SOC 1 and 2).

• Ability to write scripts or queries for reporting and data analysis.

• You are detail-oriented, analytical, and able to work independently.

• You are a team player who enjoys collaborating with others and contributing to the success of the business.

Our Diversity, Equity and Inclusion commitments

Our unique approach is a product of our diverse perspectives. This diversity of backgrounds and cultures is essential in helping us maintain our momentum. Our business and technical challenges are unique, and we need as many different voices as possible to join us in solving them - voices like yours. No matter who you are or where you’re from, we welcome you to be your true self at the company.

Studies show that women and members of underrepresented communities apply for jobs only if they meet 100% of the qualifications. Does this sound like you?

What's next?

Ensuring a smooth and enjoyable candidate experience is critical for us. We aim to get back to you regarding your application within 5 business days. Our interview process tends to take about 4 weeks to complete, but may fluctuate depending on the role.

This role is based out of our Amsterdam office. We are an office-first company and value in-person collaboration; we do not offer remote-only roles.