IT Infrastructure & Systems Internal Auditor

<h2 data-start="393" data-end="409">About SumUp</h2> <p data-start="410" data-end="562">We believe in the everyday hero. Those who have the courage to follow their passion and who have the strength and determination to realise their dreams.</p> <p data-start="564" data-end="927">Small business owners are at the heart of all we do, so we're creating powerful, easy-to-use financial solutions to help them run their businesses. With a founder’s mentality and a <em data-start="745" data-end="757">team-first</em> attitude, our diverse teams across Europe, South America and the United States work together to ensure that small business owners can be successful doing what they love.</p> <h2 data-start="934" data-end="951">🌍 Your Team</h2> <p data-start="952" data-end="1108">You’ll join <strong data-start="964" data-end="1002">SumUp’s Global Internal Audit team</strong>, part of our wider <strong data-start="1022" data-end="1044">G&amp;A / GRC function</strong>, reporting directly to the <strong data-start="1072" data-end="1105">Global Head of Internal Audit</strong>.</p> <p data-start="1110" data-end="1451">This team plays a critical role in protecting SumUp’s integrity, supporting regulatory compliance, and strengthening trust with our Board, Audit Committee, and regulators. As our <strong data-start="1289" data-end="1312">Internal Auditor - IT security specialist, </strong>&nbsp;you’ll bring essential technology and data analytics expertise into a team that partners closely with senior leaders across the business.</p> <p data-start="1453" data-end="1611">You’ll be the go-to expert for technology-focused audits, helping shape how we assess IT risks, controls, and governance across a fast-scaling global fintech.</p> <h2 data-start="1785" data-end="1807">🔍 What You’ll Do</h2> <p data-start="1808" data-end="1966">As an <strong data-start="1814" data-end="1837">IT Internal Auditor</strong>, you’ll support the delivery of SumUp’s approved Internal Audit Plan, with a strong focus on technology, data, and systems risk.</p> <p data-start="1968" data-end="1995"><strong data-start="1968" data-end="1995">In this role, you will:</strong></p> <ul data-start="1996" data-end="2749"> <li data-start="1996" data-end="2074"> <p data-start="1998" data-end="2074">Plan and execute <strong data-start="2015" data-end="2037">IT internal audits</strong> in line with the annual audit plan</p> </li> <li data-start="1996" data-end="2074"> <p data-start="1998" data-end="2074">Assess&nbsp;<strong data-start="2084" data-end="2107">IT general controls</strong>, security, governance, and risk management frameworks</p> </li> <li data-start="2164" data-end="2275"> <p data-start="2166" data-end="2275">Prepare clear, insightful <strong data-start="2192" data-end="2209">audit reports</strong>, presenting findings and recommendations to senior stakeholders</p> </li> <li data-start="2276" data-end="2371"> <p data-start="2278" data-end="2371">Use <strong data-start="2282" data-end="2300">data analytics</strong> to improve audit efficiency, sample testing, and risk identification</p> </li> <li data-start="2372" data-end="2436"> <p data-start="2374" data-end="2436">Support ad-hoc audit projects and regulatory-related reviews</p> </li> <li data-start="2437" data-end="2544"> <p data-start="2439" data-end="2544">Contribute to the continuous improvement of <strong data-start="2483" data-end="2542">internal audit methodologies, frameworks, and templates</strong></p> </li> <li data-start="2545" data-end="2648"> <p data-start="2547" data-end="2648">Stay up to date with <strong data-start="2568" data-end="2646">technology standards, regulatory developments, and industry best practices</strong></p> </li> <li data-start="2649" data-end="2749"> <p data-start="2651" data-end="2749">Build strong relationships across the business and promote a proactive internal controls culture</p> </li> <li>Conduct targeted audits of AWS security standards and access controls across our cloud environment, ensuring credit card data stored in cloud services is adequately protected;</li> <li>Perform risk-based reviews of payment products and ensure security requirements are consistently embedded throughout the development lifecycle.</li> <li>Identifying anomalies or excessive privileges across different systems and payment platforms.</li> </ul> <h2 data-start="2756" data-end="2795">✅ You’ll Be Great for This Role If</h2> <p data-start="2796" data-end="2921">You’re a <strong data-start="2805" data-end="2828">hands-on IT auditor</strong> who enjoys combining technical depth with clear communication and stakeholder collaboration.</p> <p data-start="2923" data-end="2948"><strong data-start="2923" data-end="2948">Must-have experience:</strong></p> <ul data-start="2949" data-end="3491"> <li data-start="2949" data-end="3065"> <p data-start="2951" data-end="3065">Minimum 4 years’ experience in IT / Internal Audit within a regulated financial services environment</p> </li> <li data-start="3066" data-end="3149"> <p data-start="3068" data-end="3149">Strong knowledge of audit standards, risk management, and internal controls</p> </li> <li data-start="3150" data-end="3256"> <p data-start="3152" data-end="3256">Experience auditing IT controls and frameworks such as COBIT, ISO 27001, PCI DSS, ITIL, NIST, GDPR</p> </li> <li data-start="3257" data-end="3398"> <p data-start="3259" data-end="3398">Practical exposure to areas like data security, cloud architecture, disaster recovery, security operations, or network infrastructure</p> </li> <li data-start="3399" data-end="3437"> <p data-start="3401" data-end="3437">Advanced data analytics skills</p> </li> <li data-start="3438" data-end="3491"> <p data-start="3440" data-end="3491">Professional-level English (written and spoken)</p> </li> </ul> <p data-start="3493" data-end="3510"><strong data-start="3493" data-end="3510">Nice to have:</strong></p> <ul data-start="3511" data-end="3714"> <li data-start="3511" data-end="3569&q