IT Internal Auditor

1w1 week ago

SumUp

London, GB · Full-time · £65,000 – £90,000

About this role

Join SumUp’s Global Internal Audit team as IT Internal Auditor, part of the wider G&A / GRC function, reporting directly to the Global Head of Internal Audit. This team protects SumUp’s integrity, supports regulatory compliance, and strengthens trust with the Board, Audit Committee, and regulators. You’ll bring essential technology and data analytics expertise to technology-focused audits.

Support delivery of the approved Internal Audit Plan with a strong focus on technology, data, and systems risk. Plan and execute IT internal audits in line with the annual audit plan. Assess IT general controls, security, governance, and risk management frameworks across a fast-scaling global fintech.

Prepare clear, insightful audit reports presenting findings and recommendations to senior stakeholders. Use data analytics to improve audit efficiency, sample testing, and risk identification. Partner closely with senior leaders to shape IT risk, controls, and governance assessments.

Contribute to continuous improvement of internal audit methodologies, frameworks, and templates. Stay up to date with technology standards, regulatory developments, and industry best practices. Build strong relationships across the business and promote a proactive internal controls culture.

Requirements

Minimum 4 years’ experience in IT / Internal Audit within a regulated financial services environment
Strong knowledge of audit standards, risk management, and internal controls
Experience auditing IT controls and frameworks such as COBIT, ISO 27001, PCI DSS, ITIL, NIST, GDPR
Practical exposure to areas like data security, cloud architecture, disaster recovery, security operations, or network infrastructure
Advanced data analytics skills
Professional-level English (written and spoken)
Professional certifications such as CIA, CISA, CPA
Additional IT/security certifications (CISSP, CISM, CRISC, ISO 22301 or similar)

Responsibilities

Plan and execute IT internal audits in line with the annual audit plan
Assess IT general controls, security, governance, and risk management frameworks
Prepare clear, insightful audit reports, presenting findings and recommendations to senior stakeholders
Use data analytics to improve audit efficiency, sample testing, and risk identification
Support ad-hoc audit projects and regulatory-related reviews
Contribute to the continuous improvement of internal audit methodologies, frameworks, and templates
Stay up to date with technology standards, regulatory developments, and industry best practices
Build strong relationships across the business and promote a proactive internal controls culture