Senior Security Assurance Specialist
SumUp, Berlin, Germany +1
What you will do
What you'll do
- Review information security controls, audit findings and risk mitigation plans, working with other teams to put the right fixes in place
- Run third-party due diligence, supplier reviews and contract assessments as part of the third-party risk management process
- Partner with stakeholders across the business to promote strong security practices and help embed security principles into their day-to-day processes
- Support external and internal audits and due diligence requests, responding directly to auditors, clients and partners
- Track relevant laws, regulations and security standards, flagging gaps against SumUp's existing controls
- Help maintain and improve the team's security maturity picture, identifying priority areas and leading or supporting initiatives to close them
You'll be great for this role if
- Experience reviewing and improving information security controls in a similar assurance or GRC-focused role
- Strong knowledge of information security standards such as ISO 27001 and NIST, plus payment security standards like PCI DSS