Key Qualifications

• Detailed knowledge of attack ratings and their application, based on the attack potential calculations defined by CEM (Common Methodology for Information Technology Security Evaluation).
• Detailed understanding of Strong Customer Authentication (SCA) requirements as part of PSD2.
• Experience delivering certification programmes using Common Criteria
• Experience in security testing and assurance frameworks.
• Hands on experience with demonstrating security features and modifying platform code to test.
• Solid understanding of technical application and security architectures for contactless and mobile payments including cryptographic protection of payment data.
• Strong written and verbal communication skills.
• Able to manage sophisticated projects and multiple external and internal and partners.
• Able to work independently across multiple projects simultaneously.
• Solid understanding of the FinTech industry, banking and associated regulatory requirements.
• Qualifications such as CISSP, CISM, CISA are not required but are a plus.

Description

Excellent verbal and written communication skills are crucial as you will work with internal and external partners to draft externally available certification and security specification documentation as well as leading the communication and remediation of findings with engineering teams. Experience managing and delivering large projects would be highly beneficial in this role.You should be familiar with mobile and contactless payment technologies as well as general card payment and settlement processes and security concepts. Previous experience and technical knowledge of Apple Pay and Apple Cash is desirable, although training will be provided where needed.Candidates should be comfortable with performing code reviews as well as modifying existing platform code to test features. Hands on security testing experience is a must as the candidate will be encouraged to demonstrate features and re-perform testing for and alongside testing labs as well as playing a major role in writing findings and remediation plans. Experience in describing vulnerabilities and assessing and quantifying risk/threat ratings with relation to customer and technical impacts is highly desirable.Previous experience in other security and compliance frameworks such as NY DFS 500, PCI-DSS and the NIST Cybersecurity Framework is desirable as the successful candidate will be working closely with other compliance teams, with opportunities to support programmes outside of security certification efforts.

Education & Experience

• Bachelor of Science in Computer Science or equivalent, relevant hands-on security and compliance experience.

Additional Requirements

• • This role may require occasional international travel/transatlantic travel.
• Apple’s most meaningful resource, our soul, is our people. Apple benefits help further the well-being of our employees and their families in meaningful ways. No matter where you work at Apple, you can take advantage of our health and wellness resources and time-away programmes. We’re proud to provide stock grants to employees at all levels of the company, and we also give employees the option to buy Apple stock at a discount — both offer everyone at Apple the chance to share in the company’s success. You’ll discover many more benefits of working at Apple, such as programmes that match your charitable contributions, reimburse you for continuing your education and give you special employee pricing on Apple products.
• Apple benefits programmes vary by country and are subject to eligibility requirements.
• Apple is an equal opportunity employer that is committed to inclusion and diversity. We take affirmative action to ensure equal opportunity for all applicants without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Apple is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities.