Senior Security Assurance Specialist

SumUp is hiring a Senior Security Assurance Specialist in Berlin to keep its information security programme credible to regulators and to the millions of merchants who trust it. As part of a small global assurance team spanning Europe, Brazil, and Chile, the role translates frameworks like ISO 27001, PCI DSS, and NIST into practical controls that hold up under real audits and third-party scrutiny. It reviews information security controls, audit findings, and risk mitigation plans, runs third-party due diligence and supplier reviews, and supports external and internal audits. The specialist also tracks relevant laws and standards, flags gaps, and helps improve the team's overall security maturity.