Operational Risk Analyst

SumUp's Governance, Risk & Compliance (GRC) Tribe is responsible for building and maintaining the risk management framework that keeps SumUp operating safely and in line with regulatory expectations across multiple markets. As SumUp expands across the Americas and pursues a banking licence in Brazil, the Risk Management team is at the centre of some of the most consequential work in the business — strengthening internal controls, meeting regulatory demands, and ensuring the company can grow with confidence. In this role, you'll work directly alongside the Risk Manager to lead core risk activities, coordinate with stakeholders across the business, and help mature the operational risk framework at a pivotal moment in SumUp's growth.

• Lead risk and control assessments end-to-end, including mapping, testing, registering, and maintaining the risk register up to date in the system
• Coordinate the collection and analysis of Key Risk Indicators (KRIs), ensuring risks remain within SumUp's risk appetite and reporting is timely and accurate
• Manage issue tracking and action plans arising from internal controls, operational risk findings, and external regulatory inspections
• Support operational resilience activities, including updating and testing business continuity plans and managing third-party risk assessments
• Maintain policies and procedures, ensuring they're current, approved, and accessible to relevant stakeholders
• Contribute to automation and process improvement initiatives to reduce manual effort and increase the efficiency of recurring risk activities

• Solid experience in operational risk, internal controls, or risk management within financial services, fintechs, banks, or payment institutions
• Strong knowledge of risk identification, control evaluation, issue management, and remediation tracking processes
• Experience coordinating risk activities across multiple stakeholders and business areas, with clear and confident communication at all levels
• Comfort working in a regulated environment, including familiarity with governance frameworks and evidence-based decision-making
• Advanced English proficiency (written and verbal), with the ability to lead initiatives and present risk matters to senior stakeholders across different time zones
• Experience supporting regulatory inspections or internal/external audits is a strong advantage

• Opportunity to work with a truly global, multicultural team from our dynamic São Paulo hub in the heart of the city. This involves an office-first setup
• Commitment to Diversity and Inclusion: be part of a workplace that values and promotes diversity, fostering an inclusive environment where everyone's perspectives are respected and embraced
• A dedicated annual L&D budget of R$ 10,000 for education, certifications, and conferences
• Generous time off: enjoy 22 working days of paid leave, plus public holidays and special leave days
• Stay fit: Wellhub membership included and gym at the office
• Financial wellness: SumUp contributes to your private retirement plan with Santander
• Mental well-being: access to Zenklub for therapy, coaching, and emotional wellness resources
• Meal support: benefit from a tax-free food voucher programme with Pluxee
• Break4me: 1-month sabbatical after 3 years of service
• Referral Bonus: earn additional rewards by referring talented individuals to join the SumUp team