IT Security Specialist
Role details
Job location
Tech stack
Job description
You'll be part of our Internal Audit team, reporting directly to the Global Head of Internal Audit. The team plays a crucial role in safeguarding SumUp's operations, ensuring compliance with regulatory requirements, and driving continuous improvement across the business. This role focuses on strengthening our IT audit capabilities- an essential part of our audit plan and risk management strategy., Lead and execute IT-focused internal audits, ensuring that SumUp's systems and controls meet regulatory and business requirements
- Uncover insights and improve audit efficiency by analysing data: run queries, extract information from systems, and apply advanced analytics Develop a focused IT audit plan, shaping how we evaluate technology risks across the company Translate findings into clear, actionable recommendations and present them with confidence to management and stakeholders
- Act as an independent voice for control and compliance, building trust while navigating resistance and influencing change Build strong relationships with stakeholders to foster a culture of proactive internal controls
- Stay ahead of the curve by keeping up with evolving IT standards, regulations, and best practices
Requirements
Do you have experience in Writing skills?, You have at least 4 years of internal audit experience within a regulated financial services environment. You bring proven IT auditing expertise and strong knowledge of audit standards and risk management. You are experienced with IT general controls, compliance, governance, and security frameworks (e.g. COBIT, ISO 27001, PCI DSS, ITIL, NIST, LGPD, GDPR). You have advanced data analytics skills and can leverage them in your audit work. You communicate clearly in English and are skilled in writing impactful reports.
- You are ethical, independent, and confident in influencing change across different levels of the organisation.
Nice to have: Professional certifications such as CIA, CISA, CPA, CISSP, CISM, or CRISC; knowledge of data analytics tools.
Benefits & conditions
Opportunity to work with SumUppers globally on large-scale fintech products used by millions of businesses worldwide, from our Berlin office. This involves an office-first setup
Commitment to Diversity and Inclusion: be part of a workplace that values and promotes diversity, fostering an inclusive environment where everyone's perspectives are respected and embraced
Enrolment onto our Virtual Stock Option programme: you will own a stake in SumUp's future success
A dedicated annual L&D budget of €2000 for attending conferences and/or advancing your career through further education
A corporate pension scheme where we match up to 20% of your contributions
️ Generous time off: enjoy 28 days of paid leave plus public holidays and special leave days
- ️ Numerous other benefits such as Urban Sports Club subsidy, Kita placement assistance, subsidised office lunches