Security, Risk & Compliance Architect (Payments Certification)

Emerge Limited; Warszawa; Remote; PLN 350,000 - 550,000; Full time

Job summary

Emerge Limited in Poland is seeking a Security, Risk & Compliance Architect to safeguard our SoftPOS and acquiring platform and guide it through rigorous institutional laboratory certifications.

You will own end-to-end payment security, define threat models, manage lab evaluations with FIME and Brightsight, and align PCI-MPOC, PCI-DSS, and EMVCo programs. You will implement encryption, tokenization, and secure attestation while collaborating with product teams.

Qualifications

• 7+ years in payment security architecture or cryptography engineering.
• Proven track record guiding 2+ products through PCI-MPOC/CPoC/SPoC/EMVCo cycles.
• Expert knowledge of HSMs, DUKPT, TR-31, tokenization and secure attestation.

Responsibilities

• Define threat models and encryption strategies across gateway and mobile endpoints.
• Architect controls to achieve formal PCI-MPOC, PCI-DSS, and EMVCo approvals.
• Coordinate with independent labs (e.g., FIME, Brightsight) for certification pipelines.
• Design fraud scoring integration, AML velocity checks, and security dashboards.

Skills

Threat modelling

HSMs knowledge

Cryptography

PCI MPOC

Tokenization

Lab coordination

Job description

Security, Risk & Compliance Architect (Payments Certification)

Emerge in numbers

• 14 years on the market
• 100 people onboard
• 1 6 years of average employment duration
• 50 million transactions daily for mobile wallet
• 1 B$ value transactions daily for mobile wallet
  
• 1 billion mobile money accounts

Security, Risk & Compliance Architect – PCI-MPOC / Payments Certification (Remote)

Building a next-generation Digital Currency payment ecosystem requires world-class security from day one . We are seeking a Security, Risk & Compliance Architect to safeguard our SoftPOS and acquiring platform and lead it through rigorous institutional laboratory certifications .

What you will own:

End-to-End Payment Security: Define threat models, data-in-transit/at-rest encryption, and tokenization across gateway and mobile terminal layers .

Certification Roadmap: Architect the software controls required to achieve formal PCI-MPOC, PCI-DSS, and EMVCo approvals .

Security Lab Coordination: Act as the primary technical lead for independent evaluation labs (e.g., FIME, Brightsight), managing pentest responses and formal certification pipelines .

Fraud & Risk Integration: Design integration points for real-time fraud scoring, AML velocity checks, and security auditing dashboards .

What we are looking for:

7+ years in payment security architecture or cryptography engineering .

Proven track record of taking at least 2 distinct products successfully through PCI-MPOC, CPoC, SPoC, or EMVCo certification cycles .

Expert knowledge of HSMs, Key Management Blocks (DUKPT, TR-31), tokenization, secure attestation, and code obfuscation .

Have you guided SoftPOS or payment products through PCI-MPOC/CPoC lab evaluations? Let's connect and discuss this greenfield initiative!