1,830,210open jobs
105,583companies
268,895added this week
Browse all
Salary
≈ $77k – $143k per year (Estimated)
Location
In office (Berlin)
Seniority
Senior

Confirmed on the employer's own hiring board on Oct 19, 2026. First seen by Alion on Sep 30, 2026. SumUp scores B on the Alion truth index.

Overview
Company
Impact
Profile match
SumUp is a financial technology company that provides card readers, point-of-sale systems and payment processing to small merchants, alongside business accounts, invoicing, online payment links and merchant cash advances. Founded in 2012, it serves millions of small businesses in more than 30 markets across Europe, Latin America and the United States, with large engineering and operations teams in Berlin, Sofia and São Paulo. The company is headquartered in London, United Kingdom.

Location: Office First - Berlin

Team description

Our security assurance team keeps SumUp's information security programme credible, both to regulators and to the millions of merchants who trust us with their business. As part of a small global team spanning Europe, Brazil and Chile, you'll help translate frameworks like ISO 27001, PCI DSS and NIST into practical controls that hold up under real audits and real third-party scrutiny. This is a chance to shape how a fast-growing fintech proves its security maturity across multiple regulatory environments at once, with real ownership over the areas you improve.

What you'll do

  • Review information security controls, audit findings and risk mitigation plans, working with other teams to put the right fixes in place
  • Run third-party due diligence, supplier reviews and contract assessments as part of the third-party risk management process
  • Partner with stakeholders across the business to promote strong security practices and help embed security principles into their day-to-day processes
  • Support external and internal audits and due diligence requests, responding directly to auditors, clients and partners
  • Track relevant laws, regulations and security standards, flagging gaps against SumUp's existing controls
  • Help maintain and improve the team's security maturity picture, identifying priority areas and leading or supporting initiatives to close them

You'll be great for this role if...

  • Experience reviewing and improving information security controls in a similar assurance or GRC-focused role
  • Strong knowledge of information security standards such as ISO 27001 and NIST, plus payment security standards like PCI DSS
  • Comfort working with third party risk management and audit procedures, including supplier and contract reviews
  • Ability to prioritise and simplify complex, sometimes ambiguous requests across different regulatory environments
  • Strong communication skills and confidence engaging stakeholders at all levels, from engineering teams to external auditors

Why you should join SumUp

Opportunity to work with SumUppers globally on large-scale fintech products used by millions of businesses worldwide, from our Berlin office. This involves an office-first setup 

Commitment to Diversity and Inclusion: be part of a workplace that values and promotes diversity, fostering an inclusive environment where everyone's perspectives are respected and embraced 

Enrolment onto our Virtual Stock Option programme: you will own a stake in SumUp's future success 

A dedicated annual L&D budget of €2000 for your individual development, which can be used to attend conferences and/or advance your career through further education 

A corporate pension scheme where we match up to 20% of your contributions

  Generous time off: enjoy 28 days of paid leave plus public holidays and special leave days 

Numerous other benefits such as Urban Sports Club subsidy, Kita placement assistance, subsidised office lunches 

Break4me: 1-month sabbatical after 3 years of service 

Referral Bonus: earn additional rewards by referring talented individuals to join the SumUp team

About SumUp

Be empowered to do more that matters.

At SumUp, we're on a mission to empower small businesses worldwide with simple, affordable tools that help them thrive. Today, over 4 million businesses in 38 markets rely on SumUp as their financial partner to manage payments, finance, and customer relationships.

Our commitment to small businesses is reflected in our diverse team of over 3,000 SumUppers from over 90 nationalities, united by global collaboration and an innovative mindset. Our core values lay the foundation for who we are and what we stand for, shaping our work culture and driving our success. We foster inclusivity and a culture of continuous learning, providing a safe space for personal and professional growth. Our differences make us unique and strong as we strive to create an environment where everyone belongs and feels supported, no matter how they identify.

SumUp is proud to be an Equal Employment Opportunity employer, actively seeking and embracing diversity in our workforce. We don't make hiring or employment decisions based on race, colour, religion or religious belief, ethnic or national origin, nationality, sex, gender, gender identity, sexual orientation, disability, age or any other basis protected by applicable laws or prohibited by company policy. Our commitment extends beyond recruitment to creating a safe and respectful workplace where harassment of any form is strictly prohibited. Discover more about our culture and opportunities on our careers website, and follow our journey on LinkedIn, Instagram, and TikTok.

Job Application Tip

We recognise that candidates feel they need to meet 100% of the job criteria in order to apply for a job. Please note that this is only a guide. If you don’t tick every box, it’s ok too because it means you have room to learn and develop your career at SumUp.

Free account
Stop reading job ads. Get the ones that fit.
One free account turns this page into a shortlist built around your stack, your level and your pay.
Match on every job. Stack, seniority, pay and location, scored against your profile.
1,830,210 open roles. Read straight off company career pages, refreshed every day.
Unlimited applications. Every one you send is tracked in one place, on-site or on a company board.
3 tailored CVs a month. Rewritten for the exact job you are applying to. Included free.
Create a free account Continue with Google
Free forever. No card. Under a minute.

Your match

How well do you fit this role?
Two answers are enough for a real match. No account needed.
Check my fit
Answers stay in this browser until you create an account.

Recommended for you based on this role

Security
Similar stack
Same company
Berlin
≈ $86k – $160k per year (Estimated) • In office • 7+ years exp • Hamburg
DevOps
Azure
AWS
Apply
≈ $90k – $220k per year (Estimated) • In office • Full-Time • Ottobrunn • Bremen
Cybersecurity
Zero Trust
Defense in Depth
Least Privilege
Threat Modeling
Apply
≈ $85k – $158k per year (Estimated) • In office • Full-Time • 10+ years exp • Bachelor's Degree • Berlin
DevOps
AWS
Management
ITIL
Apply
≈ $85k – $158k per year (Estimated) • In office • Full-Time • 5+ years exp • Bachelor's Degree • Berlin
DevOps
AWS
Management
ITIL
Apply
≈ $76k – $143k per year (Estimated) • Equity • In office • Full-Time • Cologne
Python
PowerShell
DevOps
Splunk
Linux
Windows
Cybersecurity
CyberArk
ISO 27001
SentinelOne
MITRE ATT&CK
SIEM
Apply
≈ $14k – $39k per year (Estimated) • In office • Full-Time • 3+ years exp • Bachelor's Degree • Phnom Penh
DevOps
VMWare
Windows Server
Kubernetes
SLI/SLO/SLA
Linux
DNS
DHCP
Cybersecurity
ISO 27001
PCI DSS
Microsoft Entra ID
Active Directory
Management
OneDrive
SharePoint
ITIL
Apply
≈ $14k – $38k per year (Estimated) • In office • Full-Time • 6+ years exp • Phnom Penh
JavaScript
Node JS
Node JS
Commander.js
DevOps
Terraform
Ansible
GCP
Helm
GitLab CI
Azure
CI/CD
ArgoCD
Jenkins
AWS
Kubernetes
Platform Engineering
Shift-Left
SLI/SLO/SLA
TCP/IP
DNS
DHCP
Cybersecurity
ISO 27001
PCI DSS
Shift-Left Security
Apply
≈ $33k – $76k per year (Estimated) • Hybrid • 5+ years exp • Moscow
Cybersecurity
ISO 27001
NIST CSF
PCI DSS
SOC 2
Apply
≈ $46k – $89k per year (Estimated) • In office • Full-Time • 5+ years exp • Bachelor's Degree • Moscow
Python
Bash
DevOps
Linux
DNS
VPN
Cybersecurity
Acunetix
Nessus
Qualys Cloud Platform
ISO 27001
PCI DSS
Invicti
PKI
SIEM
DLP
Apply
≈ $19k – $47k per year (Estimated) • Hybrid • Full-Time • Moscow
DevOps
VPN
Cybersecurity
ISO 27001
NIST CSF
Management
ITIL
Apply
≈ $42k – $101k per year (Estimated) • Equity • In office • 3+ years exp • Sofia
AI/ML
Cursor
DevOps
GCP
Vercel
AWS
Cloudflare
Cybersecurity
PCI DSS
SIEM
Management
n8n
Apply
AML Coordinator 14 days ago
≈ $26k – $64k per year (Estimated) • Equity • In office • 7+ years exp • São Paulo
Apply
Equity • In office • Full-Time • Barcelona
Apply
In office • São Carlos • São Paulo
Apply
In office • São Paulo
Apply
≈ $63k – $110k per year (Estimated) • In office • Full-Time • Berlin
Apply
≈ $47k – $107k per year (Estimated) • In office • Full-Time • Berlin
Apply
≈ $63k – $110k per year (Estimated) • In office • Full-Time • 3+ years exp • Berlin
Apply
In office • Full-Time • Berlin
Apply
≈ $32k – $56k per year (Estimated) • In office • Part-Time • Berlin
Apply
See all jobs
This is one of many
1,830,210 more open roles from verified company boards, updated every day.