Associate Director Software Security

About PAYONE

PAYONE is a leading payment service provider operating in Germany and Austria, jointly owned by Worldline and the DSV Group. Serving over 260,000 customers and processing six billion transactions annually, PAYONE facilitates seamless, secure, and efficient cashless payment solutions across physical stores, mobile, and online platforms, tailored for businesses of all sizes and sectors, upholding the highest security standards.

Role Overview and Responsibilities

• Take overarching responsibility for the technical security at PAYONE, driving ongoing improvements within a complex and highly regulated environment.
• Lead and manage the expert team responsible for the 1st Line of Defence in Security both strategically and operationally, fostering their development and capabilities.
• Oversee all critical facets of technical security ranging from Security-by-Design principles, conducting risk assessments, implementing protective measures, to incident management and enhancing system resilience.
• Collaborate as part of Worldline's global 1st Line of Defence, ensuring that PAYONE consistently meets current and future technical security requirements effectively and consistently in an international context.
• Serve as the primary contact for senior management, external regulatory bodies, auditors, and internal stakeholders on all matters concerning technical security.
• Partner with the 2nd Line of Defence to manage audits, inspections, and certifications related to PCI, BaFin, DORA, and ISO 27001, ensuring long-term compliance sustainability.
• Lead security and risk analyses for existing systems, new products, and strategic initiatives, devising practical solutions that balance security with business enablement.
• Drive the continuous enhancement of PAYONE’s security standards by defining technical guidelines and integrating security requirements early and effectively into projects, processes, and technology.
• Coordinate technical countermeasures in response to external threats, critical vulnerabilities, or security incidents, promoting swift, structured, and effective action.
• Enhance the organization's security culture through targeted training programs, awareness campaigns, and ongoing skill development within the team.
• Act as a senior-level enabler and strategic partner by setting clear priorities, removing obstacles, making informed decisions, and leading the team to success.

Qualifications and Experience

• Several years of substantial experience in cybersecurity, information security, or cyber risk management, ideally within a regulated setting.
• Proven leadership experience using modern management practices with a strong emphasis on team development and empowerment.
• Comprehensive understanding of security governance, incident management, and Security by Design implementation.
• Strong ability to harmonize security needs with business objectives.
• Excellent stakeholder management skills and the ability to communicate complex security topics effectively to diverse audiences.
• Security certifications such as CISSP, CEH, or OSCP are advantageous.
• At least five years of relevant professional experience in IT security or a related IT environment.
• Experience working within complex organizational and technical landscapes.
• Desirable knowledge of Google Cloud Security and DevOps practices.
• Familiarity with PCI DSS and similar security frameworks is preferred.
• Fluent English proficiency in speaking and writing, accompanied by strong presentation skills.
• Cultural sensitivity, adaptability, and enthusiasm for working in an international environment.

Benefits and Culture

• Flexible working hours to support work-life balance.
• Opportunities for remote work (home office).
• Mobility schemes to facilitate travel or commuting.
• An open and transparent corporate culture encouraging idea sharing.
• Continual learning and professional development programs.
• A dynamic, supportive team environment where your contributions matter.
• Engaging and future-focused work responsibilities.

Additional Information

PAYONE values each individual and actively recognizes and rewards performance. The company promotes diversity and is an Equal Opportunity employer, respecting all legally protected characteristics and personal differences. Working at PAYONE offers the chance to influence the evolving payments industry alongside a global team of over 18,000 colleagues, in a supportive and innovative setting.