Senior Security Assurance Specialist
Sumup
Salary undisclosed
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
Location: Office First - Berlin
Team description
Our security assurance team keeps SumUp's information security programme credible, both to regulators and to the millions of merchants who trust us with their business. As part of a small global team spanning Europe, Brazil and Chile, you'll help translate frameworks like ISO 27001, PCI DSS and NIST into practical controls that hold up under real audits and real third-party scrutiny. This is a chance to shape how a fast-growing fintech proves its security maturity across multiple regulatory environments at once, with real ownership over the areas you improve.
What you'll do
- Review information security controls, audit findings and risk mitigation plans, working with other teams to put the right fixes in place
- Run third-party due diligence, supplier reviews and contract assessments as part of the third-party risk management process
- Partner with stakeholders across the business to promote strong security practices and help embed security principles into their day-to-day processes
- Support external and internal audits and due diligence requests, responding directly to auditors, clients and partners
- Track relevant laws, regulations and security standards, flagging gaps against SumUp's existing controls
- Help maintain and improve the team's security maturity picture, identifying priority areas and leading or supporting initiatives to close them
You'll be great for this role if...
- Experience reviewing and improving information security controls in a similar assurance or GRC-focused role
- Strong knowledge of information security standards such as ISO 27001 and NIST, plus payment security standards like PCI DSS
- Comfort working with third party risk management and audit procedures, including supplier and contract reviews
- Ability to prioritise and simplify complex, sometimes ambiguous requests across different regulatory environments
- Strong communication skills and confidence engaging stakeholders at all levels, from engineering teams to external auditors
Why you should join SumUp
🌎 Opportunity to work with SumUppers globally on large-scale fintech products used by millions of businesses worldwide, from our Berlin office. This involves an office-first setup
🌈 Commitment to Diversity and Inclusion: be part of a workplace that values and promotes diversity, fostering an inclusive environment where everyone's perspectives are respected and embraced
🚀 Enrolment onto our Virtual Stock Option programme: you will own a stake in SumUp's future success
📚 A dedicated annual L&D budget of €2000 for your individual development, which can be used to attend conferences and/or advance your career through further education
💶 A corporate pension scheme where we match up to 20% of your contributions
🏖 Generous time off: enjoy 28 days of paid leave plus public holidays and special leave days
🩺 Numerous other benefits such as Urban Sports Club subsidy, Kita placement assistance, subsidised office lunches
🌴 Break4me: 1-month sabbatical after 3 years of service
🔗 Referral Bonus: earn additional rewards by referring talented individuals to join the SumUp team
About SumUp
Be empowered to do more that matters.
At SumUp, we're on a mission to empower small businesses worldwide with simple, affordable tools that help them thrive. Today, over 4 million businesses in 38 markets rely on SumUp as their financial partner to manage payments, finance, and customer relationships.
Our commitment to small businesses is reflected in our diverse team of over 3,000 SumUppers from over 90 nationalities, united by global collaboration and an innovative mindset. Our core values lay the foundation for who we are and what we stand for, shaping our work culture and driving our success. We foster inclusivity and a culture of continuous learning, providing a safe space for personal and professional growth. Our differences make us unique and strong as we strive to create an environment where everyone belongs and feels supported, no matter how they identify.
SumUp is proud to be an Equal Employment Opportunity employer, actively seeking and embracing diversity in our workforce. We don't make hiring or employment decisions based on race, colour, religion or religious belief, ethnic or national origin, nationality, sex, gender, gender identity, sexual orientation, disability, age or any other basis protected by applicable laws or prohibited by company policy. Our commitment extends beyond recruitment to creating a safe and respectful workplace where harassment of any form is strictly prohibited. Discover more about our culture and opportunities on our careers website, and follow our journey on LinkedIn, Instagram, and TikTok.
Job Application Tip
We recognise that candidates feel they need to meet 100% of the job criteria in order to apply for a job. Please note that this is only a guide. If you don’t tick every box, it’s ok too because it means you have room to learn and develop your career at SumUp.
Benefits
- stock options
About this role
SumUp's security assurance team works to keep the company's information security programme credible across multiple regulatory environments—from ISO 27001 and PCI DSS to NIST frameworks—while serving millions of merchants globally. In this role, you'd review security controls and audit findings, manage third-party risk assessments, and work directly with stakeholders and external auditors to translate compliance requirements into practical, defensible controls. You'd own real improvements to the company's security posture across Europe, Brazil, and Chile as part of a small global team.
The role suits someone with hands-on experience in security assurance or GRC, solid knowledge of ISO 27001, NIST, and payment security standards, and comfort navigating supplier reviews, contract assessments, and audit procedures. You'd need strong communication skills to engage engineering teams, business stakeholders, and auditors at different levels, plus the ability to prioritise and simplify complex requests across varying regulatory landscapes. This is an in-office position in Berlin on a contract basis.
SumUp offers a learning budget of €2,000 annually, stock options, 28 days of paid leave plus public holidays, a matched pension scheme up to 20%, and benefits including Urban Sports Club subsidy and subsidised lunches. After three years, you're eligible for a one-month sabbatical.
How this employer is doing
solid
- News: Recently Raised Funding
- News: Growing or Expanding
- Expanding
- Recently Raised Funding
In the news
SumUp Expands Its Core Product Ecosystem to Empower Millions of U.S. Small Businesses, GlobeNewswire
This role's local market on JobMinglr
Pay for this role
The employer didn't post a pay range for this role. That usually means pay is set in negotiation, which favors whoever arrives with numbers. Check ranges on comparable Senior Security Assurance Specialist postings in Berlin, and analyze any offer before you accept it.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.