Head of Global Credit Risk

Sumup

ABOUT SUMUP We believe in the everyday hero. Those who have the courage to follow their passion and who have the strength and determination to realise their dreams. Small business owners are at the heart of all we do, so we're creating powerful, easy-to-use financial solutions to help them run their businesses. With a founder’s mentality and a team-first attitude, our diverse teams across Europe, South America and the United States work together to ensure that small business owners can be successful doing what they love. 🌍 YOUR TEAM You’ll join SumUp’s Global Internal Audit team, part of our wider G&A / GRC function, reporting directly to the Global Head of Internal Audit. This team plays a critical role in protecting SumUp’s integrity, supporting regulatory compliance, and strengthening trust with our Board, Audit Committee, and regulators. As our Internal Auditor - IT security specialist,  you’ll bring essential technology and data analytics expertise into a team that partners closely with senior leaders across the business. You’ll be the go-to expert for technology-focused audits, helping shape how we assess IT risks, controls, and governance across a fast-scaling global fintech. 🔍 WHAT YOU’LL DO As an IT Internal Auditor, you’ll support the delivery of SumUp’s approved Internal Audit Plan, with a strong focus on technology, data, and systems risk. In this role, you will: * Plan and execute IT internal audits in line with the annual audit plan * Assess IT general controls, security, governance, and risk management frameworks * Prepare clear, insightful audit reports, presenting findings and recommendations to senior stakeholders * Use data analytics to improve audit efficiency, sample testing, and risk identification * Support ad-hoc audit projects and regulatory-related reviews * Contribute to the continuous improvement of internal audit methodologies, frameworks, and templates * Stay up to date with technology standards, regulatory developments, and industry best practices * Build strong relationships across the business and promote a proactive internal controls culture * Conduct targeted audits of AWS security standards and access controls across our cloud environment, ensuring credit card data stored in cloud services is adequately protected; * Perform risk-based reviews of payment products and ensure security requirements are consistently embedded throughout the development lifecycle. * Identifying anomalies or excessive privileges across different systems and payment platforms. ✅ YOU’LL BE GREAT FOR THIS ROLE IF You’re a hands-on IT auditor who enjoys combining technical depth with clear communication and stakeholder collaboration. Must-have experience: * Minimum 4 years’ experience in IT / Internal Audit within a regulated financial services environment * Strong knowledge of audit standards, risk management, and internal controls * Experience auditing IT controls and frameworks such as COBIT, ISO 27001, PCI DSS, ITIL, NIST, GDPR * Practical exposure to areas like data security, cloud architecture, disaster recovery, security operations, or network infrastructure * Advanced data analytics skills * Professional-level English (written and spoken) Nice to have: * Professional certifications such as CIA, CISA, CPA * Additional IT/security certifications (CISSP, CISM, CRISC, ISO 22301, or similar) * Experience with audit-related data analytics tools What sets you apart: * High ethical standards and integrity * Strong analytical and problem-solving mindset * Confidence influencing change and challenging the status quo constructively * Ability to work independently in a multinational environment ---------------------------------------------------------------------------------------------------------------------------------- 💚 WHY YOU SHOULD JOIN SUMUP 🇬🇧 LONDON, UNITED KINGDOM 🌎 Opportunity to work with a truly global, multicultural team from our central Covent Garden location, wrapped in historic charm and modern flair. This involves an office-first setup 🌈 Commitment to Diversity and Inclusion: be part of a workplace that values and promotes diversity, fostering an inclusive environment where everyone's perspectives are respected and embraced 🚀 Enrolment onto our VSOP program: you will own a stake in SumUp’s future success 🏖 Generous time off: enjoy 28 days of paid leave, plus bank holidays and special leaves 🏥 Health matters: Vitality health cover, including optical and dental 🚗 Life made easier: salary-sacrifice commuter benefits via Gogeta 💼 Financial security: retirement scheme (SumUp matches 7% when you contribute 5%) 🛡 Peace of mind: life insurance from MetLife for 2× your salary 🌴 Break4me: 1-month sabbatical after 3 years of service 🔗 Referral Bonus: earn additional rewards by referring talented individuals to join the SumUp team Job Application Tip We recognise that candidates feel they need to meet 100% of the job criteria in order to apply for a job. Please note that this is only a guide. If you don’t tick every box, it’s ok too because it means you have room to learn and develop your career at SumUp.

Sumup

Are you passionate about making an impact through technology and controls? At SumUp, we’re looking for an IT Internal Auditor to strengthen our Internal Audit team in Berlin. In this role, you’ll help ensure our IT environment is secure, compliant, and ready to support millions of businesses worldwide. ABOUT SUMUP SumUp is a leading global fintech company committed to leveling the playing field for small businesses. Since 2012, we’ve been a trusted partner for over 4 million merchants in 36 markets worldwide. Our mission is to make business simple and affordable by providing tools that help entrepreneurs get paid, manage finances, and grow their customer relationships. TEAM DESCRIPTION You’ll be part of our Internal Audit team, reporting directly to the Global Head of Internal Audit. The team plays a crucial role in safeguarding SumUp’s operations, ensuring compliance with regulatory requirements, and driving continuous improvement across the business. This role focuses on strengthening our IT audit capabilities— an essential part of our audit plan and risk management strategy. WHAT YOU’LL DO * Lead and execute IT-focused internal audits, ensuring that SumUp’s systems and controls meet regulatory and business requirements * Uncover insights and improve audit efficiency by analysing data: run queries, extract information from systems, and apply advanced analytics * Develop a focused IT audit plan, shaping how we evaluate technology risks across the company * Translate findings into clear, actionable recommendations and present them with confidence to management and stakeholders * Act as an independent voice for control and compliance, building trust while navigating resistance and influencing change * Build strong relationships with stakeholders to foster a culture of proactive internal controls * Stay ahead of the curve by keeping up with evolving IT standards, regulations, and best practices * Conduct targeted audits of AWS security standards and access controls across our cloud environment, ensuring credit card data stored in cloud services is adequately protected; * Perform risk-based reviews of payment products and ensure security requirements are consistently embedded throughout the development lifecycle. * Identifying anomalies or excessive privileges across different systems and payment platforms. YOU’LL BE GREAT FOR THIS ROLE IF * You have at least 4 years of internal audit experience within a regulated financial services environment. * You bring proven IT auditing expertise and strong knowledge of audit standards and risk management. * You are experienced with IT general controls, compliance, governance, and security frameworks (e.g. COBIT, ISO 27001, PCI DSS, ITIL, NIST, LGPD, GDPR). * You have advanced data analytics skills and can leverage them in your audit work. * You communicate clearly in English and are skilled in writing impactful reports. * You are ethical, independent, and confident in influencing change across different levels of the organisation. Nice to have: Professional certifications such as CIA, CISA, CPA, CISSP, CISM, or CRISC; knowledge of data analytics tools. WHY YOU SHOULD JOIN SUMUP 🌎 Opportunity to work with SumUppers globally on large-scale fintech products used by millions of businesses worldwide, from our Berlin office. This involves an office-first setup 🌈 Commitment to Diversity and Inclusion: be part of a workplace that values and promotes diversity, fostering an inclusive environment where everyone's perspectives are respected and embraced 🚀 Enrolment onto our Virtual Stock Option programme: you will own a stake in SumUp’s future success 📚 A dedicated annual L&D budget of €2000 for attending conferences and/or advancing your career through further education 💶 A corporate pension scheme where we match up to 20% of your contributions 🏖️ Generous time off: enjoy 28 days of paid leave plus public holidays and special leave days 🚵🏾‍♂️ Numerous other benefits such as Urban Sports Club subsidy, Kita placement assistance, subsidised office lunches 🌴 Break4me: 1-month sabbatical after 3 years of service 🔗 Referral Bonus: earn additional rewards by referring talented individuals to join the SumUp team About SumUp We believe in the everyday hero.   Small business owners are at the heart of all we do, so we create powerful, easy-to-use financial solutions to help them run their businesses. With a founder’s mentality and a 'team-first’ attitude, our diverse teams across Europe, South America, Australia and the United States work together to ensure that the small business owners we partner with can be successful doing what they love.    SumUp is an Equal Employment Opportunity employer that proudly pursues and hires a diverse workforce. SumUp does not make hiring or employment decisions on the basis of race, colour, religion or religious belief, ethnic or national origin, nationality, sex, gender, gender identity, sexual orientation, disability, age or any other basis protected by applicable laws or prohibited by company policy. SumUp also strives for a healthy and safe workplace and strictly prohibits harassment of any kind.   SumUp will not accept unsolicited resumes from any source other than directly from a candidate.  Job Application Tip We recognise that candidates feel they need to meet 100% of the job criteria in order to apply for a job. Please note that this is only a guide. If you don’t tick every box, it’s ok too because it means you have room to learn and develop your career at SumUp.

Adyen

This is Adyen Adyen provides payments, data, and financial products in a single solution for customers like Meta, Uber, H&M, and Microsoft - making us the financial technology platform of choice. At Adyen, everything we do is engineered for ambition.  For our teams, we create an environment with opportunities for our people to succeed, backed by the culture and support to ensure they are enabled to truly own their careers. We are motivated individuals who tackle unique technical challenges at scale and solve them as a team. Together, we deliver innovative and ethical solutions that help businesses achieve their ambitions faster. Why you should join the Regulatory team Adyen’s Regulatory function plays a strategic role in the acquisition and management of Adyen’s permissions and licenses required to support Adyen’s commercial ambitions. As a financial technology platform operating in a highly regulated environment, Adyen is subject to ever changing laws, regulations and standards. Adyen’s Regulatory team is tasked with the interpretation and analysis of complex payment regulatory challenges, identification and mitigation of integrity risks as well as engaging with strategic internal and external stakeholders (including regulators and senior executives).  Our business challenges are unique and we welcome different perspectives in solving them - voices like yours could make a difference. Regulatory Counsel  Our dynamic LATAM Regulatory team is looking for a Regulatory Counsel who has experience with the payments, financial service or fintech industry in Mexico. This position will report to the Head of Regulatory LATAM and will be based in Mexico City. In this role, you will enable Adyen to create unique business opportunities while you will work alongside our product teams to assist them with the launch of new payment products, as well as further enhancing existing product offerings.  You will also work closely together with the legal, compliance, risk and commercial teams around the world. You will be part of a group of people always looking for opportunities to innovate and challenge the status quo. You’re familiar with the regulatory landscape covering payment services, are able to understand the regulatory and legal challenges and find pragmatic solutions, in line with commercial and strategic objectives, which allow for scale.  What you’ll do * Provide strategic regulatory advice associated with payments laws and regulations, including payment institution licensing, e-money, digital wallets, payment schemes (credit and debit cards), acquiring services, open finance, etc; * Collaborate with the products team to understand the commercial and technical needs for the envisioned product proposition, and work on cross-functional projects and teams such as Product, Legal, Compliance, Risk, and Audit, to develop, enhance and implement business and regulatory initiatives in line with Adyen’s ambitious objectives which allow for scale; * Lead regulatory engagements (both internally and externally) including managing relationships with regulators and auditors, and managing inspections and reports to the regulator; * Anticipate and identify key emerging regulatory obligations and integrity risks, and ensure these are addressed in a practical and scalable way; * Translate identified obligations into relevant Policies and Procedures to be communicated and implemented across the global business; * Represent regulatory on a variety of workstreams and products to establish regulatory strategies that align with global objectives and ensure controlled and compliant growth. Who you are * You have 5+ years experience in a regulatory and previous interactions with the regulators, and/or legal function focused on payments, financial services and/or fintech industry either as in-house or in a top-tier law firm; * You are knowledgeable in the Mexican payments, financial services and/or fintech industry; * You have a strong sense of initiative, independence and ability to take ownership enabling you to contribute to a fast-growing business; * You are an analytical and critical thinker who finds creative solutions for complex regulatory challenges enabling business opportunities while staying in control; * You have strong interpersonal and communication skills as well as experience in managing relationship with internal stakeholders and/or the relationship with regulators or supervisors; * Must be a licensed attorney, preferably certified by the CNBV in AML/CFT. * Fluent in Spanish and English, both written and spoken. Our Diversity, Equity and Inclusion commitments  Our unique approach is a product of our diverse perspectives. This diversity of backgrounds and cultures is essential in helping us maintain our momentum. Our business and technical challenges are unique, and we need as many different voices as possible to join us in solving them - voices like yours. No matter who you are or where you’re from, we welcome you to be your true self at Adyen.  Studies show that women and members of underrepresented communities apply for jobs only if they meet 100% of the qualifications. Does this sound like you? If so, Adyen encourages you to reconsider and apply. We look forward to your application! What’s next? Ensuring a smooth and enjoyable candidate experience is critical for us. We aim to get back to you regarding your application within 5 business days. Our interview process tends to take about 4 weeks to complete, but may fluctuate depending on the role. Learn more about our hiring process here. Don’t be afraid to let us know if you need more flexibility. This role is based out of our Mexico City office. We are an office-first company and value in-person collaboration; we do not offer remote-only roles.