Senior Internal Auditor

Overview

In this IT security-focused Internal Auditor role, you’ll strengthen SumUp’s IT risk governance and controls. You’ll work with senior leaders to audit technology, data, and cloud environments, contributing to regulatory compliance and trust with the Board. You will drive data-driven inspections and improve audit methodologies within a fast-scaling fintech. This role offers hands-on technical depth in a multinational setting with real impact on security and control maturity.

Pay / Benefits

• office-first London location in Covent Garden
• VSOP program equity stake
• 28 days of paid leave + holidays
• Vitality health cover (including optical and dental)
• salary-sacrifice commuter benefits
• retirement scheme with 7% employer match at 5% contribution

Responsibilities

• Plan and execute IT audits aligned with the annual plan
• Assess IT general controls, security, governance, and risk frameworks
• Prepare clear audit reports with findings and recommendations
• Utilize data analytics to enhance audit efficiency and risk identification
• Support ad-hoc audits and regulatory reviews
• Improve internal audit methodologies, frameworks, and templates
• Stay updated on technology standards and regulatory developments
• Build strong cross-functional relationships to promote a controls culture
• Conduct targeted audits of AWS security and access controls in cloud environments
• Perform risk-based reviews of payment products across the development lifecycle
• Identify anomalies or excessive privileges across systems and payment platforms

Key requirements

• Minimum 4 years in IT / Internal Audit within regulated financial services
• Strong knowledge of audit standards, risk management, and internal controls
• Experience auditing IT controls and frameworks ( COBIT, ISO 27001, PCI DSS, ITIL, NIST, GDPR)
• Exposure to data security, cloud architecture, DR, security operations, or network infrastructure
• Advanced data analytics skills
• Professional-level English (written and spoken)

• Hands-on and collaborative communicator
• Stakeholder management and influencing abilities
• Strong analytical and problem-solving mindset
• IT controls and risk management
• Data analytics for auditing
• Cloud security and AWS controls

…