About SumUp

We believe in the everyday hero. Those who have the courage to follow their passion and who have the strength and determination to realise their dreams. Small business owners are at the heart of all we do, so we're creating powerful, easy-to-use financial solutions to help them run their businesses. With a founder’s mentality and a team-first attitude, our diverse teams across Europe, South America and the United States work together to ensure that small business owners can be successful doing what they love.

🌍 Your Team

You’ll join SumUp’s Global Internal Audit team, part of our wider G&A / GRC function, reporting directly to the Global Head of Internal Audit. This team plays a critical role in protecting SumUp’s integrity, supporting regulatory compliance, and strengthening trust with our Board, Audit Committee, and regulators. As our Internal Auditor - IT security specialist, you’ll bring essential technology and data analytics expertise into a team that partners closely with senior leaders across the business.

You’ll be the go-to expert for technology-focused audits, helping shape how we assess IT risks, controls, and governance across a fast-scaling global fintech.

🔍 What You’ll Do

As an IT Internal Auditor, you’ll support the delivery of SumUp’s approved Internal Audit Plan, with a strong focus on technology, data, and systems risk. In this role, you will:

• Plan and execute IT internal audits in line with the annual audit plan
• Assess IT general controls, security, governance, and risk management frameworks
• Prepare clear, insightful audit reports, presenting findings and recommendations to senior stakeholders
• Use data analytics to improve audit efficiency, sample testing, and risk identification
• Support ad-hoc audit projects and regulatory-related reviews
• Contribute to the continuous improvement of internal audit methodologies, frameworks, and templates
• Stay up to date with technology standards, regulatory developments, and industry best practices
• Build strong relationships across the business and promote a proactive internal controls culture
• Conduct targeted audits of AWS security standards and access controls across our cloud environment, ensuring credit card data stored in cloud services is adequately protected;
• Perform risk-based reviews of payment products and ensure security requirements are consistently embedded throughout the development lifecycle.
• Identifying anomalies or excessive privileges across different systems and payment platforms.