Information Security Architect

About the Position

Information Security Architect

Sofia, Bulgaria

Office first

---

About the Team

SumUp's Information Security team safeguards a payments platform utilized by millions of small businesses. As an Information Security Architect, you'll play a pivotal role in shaping the security architecture for new products, from mobile payments to the secure use of AI. You'll also be a key responder when incidents occur, balancing prevention and response.

---

Responsibilities

• Define security architecture requirements for high-risk initiatives, including PCI PIN, payment processing, and mobile payment surfaces.
• Build automation for security architecture assurance and incident response, such as policy-as-code, detection-as-code, and SOAR workflows.
• Lead incident triage, investigation, containment, and remediation for complex, high-severity security incidents.
• Develop and improve incident response playbooks and detection automation with the wider security team.
• Coordinate with Engineering, Platform, IT, Product, Risk, and Compliance to validate security before launch.
• Maintain a prioritized security roadmap that balances architecture work with lessons learned from incidents.

---

Requirements

• More than 8 years of security experience, typically including at least three years focused on security architecture and substantial hands-on incident response.
• Strong knowledge of SIEM/SOAR/CNAPP systems.
• Experience working with modern Cloud vendors (AWS/AZURE/GCP) & SaaS solutions (Vercel, n8n, Cloudflare, Langdock, Cursor, IncidentIO, Notion, Vanta).
• Strong knowledge of payment security standards, including PCI DSS and PCI PIN.
• Experience building or improving detection as code, security automation pipelines, or workflow automation tools.
• Comfort translating architecture decisions and incident risk into clear language for senior stakeholders.
• Track record of leading response during high-severity incidents while balancing multiple cross-functional priorities.

---

Why Join SumUp?

🌍 Global Impact: Work with SumUppers worldwide on large-scale fintech products used by millions of businesses.

🌈 Diversity and Inclusion: Be part of a workplace that values and promotes diversity, fostering an inclusive environment.

🚀 Stock Options: Enrol in our Virtual Stock Option programme and own a stake in SumUp's future success.

📚 Learning and Development: A dedicated annual L&D budget of €2000 and 10 paid days of educational leave.

🏖 Generous Time Off: 25 days of paid leave, plus one extra day per year of service (up to 35), along with public holidays and special leave options.

🏥 Health and Life Insurance: Additional coverage for peace of mind.

💪 Wellness Programs: On-site yoga and a co-sponsored Multisport card.

🍽 Meal Support: Benefit from a tax-free food voucher program plus flexibility via our Re: Benefits platform.

🚌 Easy Commute: Free shuttle buses to Joliot-Curie metro station.

🌴 Sabbatical: 1-month sabbatical after 3 years of service.

🔗 Referral Bonus: Earn additional rewards by referring talented individuals to join the SumUp team.

---

About SumUp

At SumUp, we empower small businesses across the globe by providing simple and affordable tools that allow them to thrive. Today, over 4 million businesses in 38 markets rely on SumUp as their financial partner to manage payments, finance, and customer relationships.

Our commitment to small businesses is reflected in our diverse team of over 3,000 SumUppers from over 90 nationalities, united by global collaboration and an innovative mindset. We foster inclusivity and a continuous learning culture, providing a safe space for personal and professional growth. Our differences make us unique and strong as we strive to create an environment where everyone belongs and feels supported, no matter how they identify.

SumUp is proud to be an Equal Employment Opportunity employer, actively seeking and embracing diversity in our workforce. We don't make hiring or employment decisions based on race, colour, religion or religious belief, ethnic or national origin, nationality, sex, gender, gender identity, sexual orientation, disability, age or any other basis protected by applicable laws or prohibited by company policy. Our commitment extends beyond recruitment to creating a safe and respectful workplace where harassment of any form is strictly prohibited.

Discover more about our culture and opportunities on our careers website, and follow our journey on LinkedIn, Instagram, and TikTok.

---

Job Application Tip

We recognize that candidates feel they need to meet 100% of the job criteria in order to apply for a job. Please note that this is only a guide. If you don’t tick every box, it’s ok too because it means you have room to learn and develop your career at SumUp.