Information Security Architect

SumUp; United States; On-site; USD 68,000 - 101,000; Full time

Benefits offered by this job

Office in Sofia

Virtual Stock Option

€2000 L&D budget

25 days paid leave

Health insurance

Multisport card

Meal vouchers

Shuttle to Joliot-Curie

Sabbatical after 3 years

Referral bonus

Job summary

SumUp's Information Security team protects a payments platform used by millions of small businesses. As an Information Security Architect, you will influence security from day one, shaping architecture for new products and leading responses when incidents occur, with a role that blends prevention and active remediation.

You'll define architecture requirements for PCI PIN and payment surfaces, build automation for assurance and SOAR, and coordinate with cross-functional teams to validate security

Qualifications

• Hands-on security architecture experience and incident response exposure.
• Knowledge of PCI DSS and PCI PIN standards.
• Experience with SIEM/SOAR and cloud platforms (AWS/Azure/GCP).
• Ability to translate architecture decisions for executives and stakeholders.
• Proven track record leading security responses during high-severity incidents.

Responsibilities

• Define security architecture requirements for high-risk initiatives, including PCI PIN, payment processing, and mobile payment surfaces.
• Build automation for security architecture assurance and incident response, such as policy-as-code, detection-as-code, and SOAR workflows.
• Lead incident triage, investigation, containment, and remediation for complex, high-severity security incidents.
• Develop and improve incident response playbooks and detection automation with the wider security team.
• Coordinate with Engineering, Platform, IT, Product, Risk, and Compliance to validate security before launch.
• Maintain a prioritised security roadmap that balances architecture work with lessons learned from incidents.

Skills

Security architecture

Incident response

Cloud security

CNAPP

Policy as code

Automation

Detection as code

Leadership

Tools

Notion

Vercel

n8n

Cloudflare

Langdock

Cursor

IncidentIO

Vanta

Job description

Office first

Team description

SumUp's Information Security team protects a payments platform used by millions of small businesses, which means the work here directly shapes whether merchants can trust us with their money every single day. As an Information Security Architect, you'll help decide how security gets built into new products from day one, from mobile payments to the secure use of AI, while also stepping in as a senior responder when things go wrong. It's a role that sits at the intersection of prevention and response: you'll shape the architecture that stops incidents from happening, and you'll be in the room leading the response when they do anyway.

What you'll do

• Define security architecture requirements for high-risk initiatives, including PCI PIN, payment processing, and mobile payment surfaces
• Build automation for security architecture assurance and incident response, such as policy-as-code, detection-as-code, and SOAR workflows
• Lead incident triage, investigation, containment, and remediation for complex, high-severity security incidents
• Develop and improve incident response playbooks and detection automation with the wider security team
• Coordinate with Engineering, Platform, IT, Product, Risk, and Compliance to validate security before launch
• Maintain a prioritised security roadmap that balances architecture work with lessons learned from incidents

You'll be great for this role if…

• More than 8 years of security experience, typically including at least three years focused on security architecture and substantial hands‑on incident response
• Strong knowledge of SIEM/SOAR/CNAPP systems
• Experience working with modern Cloud vendors (AWS/AZURE/GCP) & SaaS solutions (Vercel, n8n, Cloudflare, Langdock, Cursor, IncidentIO, Notion, Vanta)
• Strong knowledge of payment security standards, including PCI DSS and PCI PIN
• Experience building or improving detection as code, security automation pipelines, or workflow automation tools
• Comfort translating architecture decisions and incident risk into clear language for senior stakeholders
• Track record of leading response during high-severity incidents while balancing multiple cross-functional priorities

Why you should join SumUp

Opportunity to work with SumUppers globally on large-scale fintech products used by millions of businesses worldwide, from our modern Sofia office. This involves an office‑first setup

Commitment to Diversity and Inclusion: be part of a workplace that values and promotes diversity, fostering an inclusive environment where everyone's perspectives are respected and embraced

Enrolment onto our Virtual Stock Option programme: you will own a stake in SumUp's future success

A dedicated annual L&D budget of €2000 and 10 paid days of educational leave which can be used to attend conferences and/or advance your career through further education

Generous time off: 25 days of paid leave, plus one extra day per year of service (up to 35), along with public holidays and special leave options

Peace of mind: additional health insurance and life insurance

Stay active: on‑site yoga and a co‑sponsored Multisport card offering access to hundreds of sports facilities

Meal support: benefit from a tax‑free food voucher program plus flexibility via our Re: Benefits platform

Easy commute: free shuttle buses connecting directly to Joliot‑Curie metro station

Break4me: 1‑month sabbatical after 3 years of service

Referral Bonus: earn additional rewards by referring talented individuals to join the SumUp team

About SumUp

Be empowered to do more that matters.

At SumUp, we're on a mission to empower small businesses across the globe by providing simple and affordable tools that allow them to thrive. Today, over 4 million businesses in 38 markets rely on SumUp as their financial partner to manage payments, finance, and customer relationships.

Our commitment to small businesses is reflected in our diverse team of over 3,000 SumUppers from over 90 nationalities, united by global collaboration and an innovative mindset. Our core values shape who we are and what we stand for, shaping our work culture and driving our success. We foster inclusivity and a continuous learning culture, providing a safe space for personal and professional growth. Our differences make us unique and strong as we strive to create an environment where everyone belongs and feels supported, no matter how they identify.

SumUp is proud to be an Equal Employment Opportunity employer, actively seeking and embracing diversity in our workforce. We don't make hiring or employment decisions based on race, colour, religion or religious belief, ethnic or national origin, nationality, sex, gender, gender identity, sexual orientation, disability, age or any other basis protected by applicable laws or prohibited by company policy. Our commitment extends beyond recruitment to creating a safe and respectful workplace where harassment of any form is strictly prohibited. Discover more about our culture and opportunities on our careers website, and follow our journey on LinkedIn, Instagram, and TikTok.

Job Application Tip

We recognise that candidates feel they need to meet 100% of the job criteria in order to apply for a job. Please note that this is only a guide. If you don’t tick every box, it’s ok too because it means you have room to learn and develop your career at SumUp.