Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Senior Security Assurance Specialist role.
Rezi rewrites your resume against SumUp's job description. Free.
Tailor your resume to this Senior Security Assurance Specialist role.
Rezi rewrites your resume against SumUp's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Senior Security Assurance Specialist posting at SumUp — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Senior Security Assurance Specialist posting at SumUp — free, in seconds.
About the Role
Our security assurance team keeps SumUp's information security programme credible to regulators and millions of merchants. You'll help translate frameworks like ISO 27001, PCI DSS and NIST into practical controls that hold up under real audits. This is a chance to shape how a fast-growing fintech proves its security maturity across multiple regulatory environments, with ownership over areas you improve.
Responsibilities
- Review information security controls, audit findings and risk mitigation plans, working with other teams to implement fixes.
- Conduct third-party due diligence, supplier reviews, and contract assessments.
- Partner with stakeholders to promote strong security practices and embed security principles.
- Support external and internal audits and due diligence requests.
- Track relevant laws, regulations, and security standards, identifying gaps.
- Maintain and improve the team's security maturity picture, identifying priority areas and leading or supporting initiatives.
Requirements
- Experience reviewing and improving information security controls in a similar assurance or GRC-focused role.
- Strong knowledge of information security standards such as ISO 27001 and NIST, plus payment security standards like PCI DSS.
- Comfort working with third-party risk management and audit procedures, including supplier and contract reviews.
- Ability to prioritize and simplify complex, sometimes ambiguous requests across different regulatory environments.
- Strong communication skills and confidence engaging stakeholders at all levels.
Skills
- ISO 27001
- NIST
- PCI DSS
- Third-party risk management
- Audit procedures
- Supplier reviews
- Contract reviews
- Communication skills
Location
- Berlin
Work Type
- Office First
Experience Level
- Mid-level
Benefits
- Enrolment onto our Virtual Stock Option programme
- A dedicated annual L&D budget of €2000 for individual development
- A corporate pension scheme where we match up to 20% of your contributions
- 28 days of paid leave plus public holidays and special leave days
- Urban Sports Club subsidy
- Kita placement assistance
- Subsidised office lunches
- 1-month sabbatical after 3 years of service
- Referral Bonus
About the Company
- SumUp empowers small businesses worldwide with simple, affordable tools to help them thrive.
- Over 4 million businesses in 38 markets rely on SumUp as their financial partner.
- Our diverse team of over 3,000 SumUppers from over 90 nationalities are united by global collaboration and an innovative mindset.
- We foster inclusivity and a culture of continuous learning, providing a safe space for personal and professional growth.
- Our differences make us unique and strong as we strive to create an environment where everyone belongs and feels supported.
Equal Opportunity
- SumUp is proud to be an Equal Employment Opportunity employer, actively seeking and embracing diversity in our workforce.
- We don't make hiring or employment decisions based on race, colour, religion or religious belief, ethnic or national origin, nationality, sex, gender, gender identity, sexual orientation, disability, age or any other basis protected by applicable laws or prohibited by company policy.
- Our commitment extends beyond recruitment to creating a safe and respectful workplace where harassment of any form is strictly prohibited.