Security assurance specialist in fintech

SumUp; Berlin; On-site; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Enrolment в Virtual Stock Option

L&D бюджет €2000

Пенсионный план с match 20%

28 дней отпуска + праздники

Urban Sports Club субсидия

Kita placement assistance

обеды в офисе

Break4me: 1‑месячный саббатикал после

Referral Bonus

Job summary

SumUp Inc. в Берлине ищет специалиста по обеспечению информационной безопасности для внедрения международных стандартов и контроля над практическими мерами, взаимодействуя с регуляторами и аудиторами.

Вы будете частью небольшой глобальной команды в Европе, Бразилии и Чили, участвуя в аудите, управлении рисками поставщиков и реальными улучшениями безопасности в рамках требований регуляторов.

Qualifications

• Опыт оценки и улучшения информационной безопасности в роли assurance/GRC
• Знание стандартов ISO 27001 и NIST, а также PCI DSS
• Опыт работы с управлением рисками третьих лиц и аудитами
• Умение приоритизировать запросы в разных регуляторных средах
• Сильные коммуникативные навыки и уверенность во взаимодействии со стейкхолдерами и аудиторами

Responsibilities

• Review information security controls, audit findings and risk mitigation plans, working with other teams to put the right fixes in place
• Run third-party due diligence, supplier reviews and contract assessments as part of the third-party risk management process
• Partner with stakeholders across the business to promote strong security practices and help embed security principles into their day-to-day processes
• Support external and internal audits and due diligence requests, responding directly to auditors, clients and partners
• Track relevant laws, regulations and security standards, flagging gaps against SumUp's existing controls
• Help maintain and improve the team's security maturity picture, identifying priority areas and leading or supporting initiatives to close them

Skills

ISO 27001

NIST

PCI DSS

Third-party risk

Stakeholder comms

Job description

Описание

Our security assurance team keeps SumUp's information security programme credible, both to regulators and to the millions of merchants who trust us with their business. As part of a small global team spanning Europe, Brazil and Chile, you'll help translate frameworks like ISO 27001, PCI DSS and NIST into practical controls that hold up under real audits and real third-party scrutiny. This is a chance to shape how a fast-growing fintech proves its security maturity across multiple regulatory environments at once, with real ownership over the areas you improve.

Задачи

• Review information security controls, audit findings and risk mitigation plans, working with other teams to put the right fixes in place
• Run third-party due diligence, supplier reviews and contract assessments as part of the third-party risk management process
• Partner with stakeholders across the business to promote strong security practices and help embed security principles into their day-to-day processes
• Support external and internal audits and due diligence requests, responding directly to auditors, clients and partners
• Track relevant laws, regulations and security standards, flagging gaps against SumUp's existing controls
• Help maintain and improve the team's security maturity picture, identifying priority areas and leading or supporting initiatives to close them

Требования

• Experience reviewing and improving information security controls in a similar assurance or GRC-focused role
• Strong knowledge of information security standards such as ISO 27001 and NIST, plus payment security standards like PCI DSS
• Comfort working with third party risk management and audit procedures, including supplier and contract reviews
• Ability to prioritise and simplify complex, sometimes ambiguous requests across different regulatory environments
• Strong communication skills and confidence engaging stakeholders at all levels, from engineering teams to external auditors

Условия

Opportunity to work with SumUppers globally on large-scale fintech products used by millions of businesses worldwide, from our Berlin office. This involves an office-first setup

Commitment to Diversity and Inclusion: be part of a workplace that values and promotes diversity, fostering an inclusive environment where everyone's perspectives are respected and embraced

• Enrolment onto our Virtual Stock Option programme: you will own a stake in SumUp's future success
• A dedicated annual L&D budget of €2000 for your individual development, which can be used to attend conferences and/or advance your career through further education
• A corporate pension scheme where we match up to 20% of your contributions
• Generous time off: enjoy 28 days of paid leave plus public holidays and special leave days
• Numerous other benefits such as Urban Sports Club subsidy, Kita placement assistance, subsidised office lunches
• Break4me: 1-month sabbatical after 3 years of service
• Referral Bonus: earn additional rewards by referring talented individuals to join the SumUp team