Operational Risk Senior Analyst - GRC Tribe

sumup· Legal & Compliance
Apply Now ↗
📍 São Paulo, São Paulo, Brazil

About this role

📍 São Paulo, Brazil | Office-first


Team description

SumUp's Governance, Risk & Compliance (GRC) Tribe is responsible for building and maintaining the risk management framework that keeps SumUp operating safely and in line with regulatory expectations across multiple markets. As SumUp expands across the Americas and pursues a banking licence in Brazil, the Risk Management team is at the centre of some of the most consequential work in the business — strengthening internal controls, meeting regulatory demands, and ensuring the company can grow with confidence. In this role, you'll work directly alongside the Risk Manager to lead core risk activities, coordinate with stakeholders across the business, and help mature the operational risk framework at a pivotal moment in SumUp's growth.


What you'll do

  • Lead risk and control assessments end-to-end, including mapping, testing, registering, and maintaining the risk register up to date in the system

  • Coordinate the collection and analysis of Key Risk Indicators (KRIs), ensuring risks remain within SumUp's risk appetite and reporting is timely and accurate

  • Manage issue tracking and action plans arising from internal controls, operational risk findings, and external regulatory inspections

  • Support operational resilience activities, including updating and testing business continuity plans and managing third-party risk assessments

  • Maintain policies and procedures, ensuring they're current, approved, and accessible to relevant stakeholders

  • Contribute to automation and process improvement initiatives to reduce manual effort and increase the efficiency of recurring risk activities


You'll be great for this role if you have…

  • Solid experience in operational risk, internal controls, or risk management within financial services, fintechs, banks, or payment institutions

  • Strong knowledge of risk identification, control evaluation, issue management, and remediation tracking processes

  • Experience coordinating risk activities across multiple stakeholders and business areas, with clear and confident communication at all levels

  • Comfort working in a regulated environment, including familiarity with governance frameworks and evidence-based decision-making

  • Advanced English proficiency (written and verbal), with the ability to lead initiatives and present risk matters to senior stakeholders across different time zones

  • Experience supporting regulatory inspections or internal/external audits is a strong advantage


Why you should join SumUp

  • 🌎 Opportunity to work with a truly global, multicultural team from our dynamic São Paulo hub in the heart of the city. This involves an office-first setup

  • 🌈 Commitment to Diversity and Inclusion: be part of a workplace that values and promotes diversity, fostering an inclusive environment where everyone's perspectives are respected and embraced

  • 📚 A dedicated annual L&D budget of R$ 10,000 for education, certifications, and conferences

  • 🏖 Generous time off: enjoy 22 working days of paid leave, plus public holidays and special leave days

  • 💪 Stay fit: Wellhub membership included and gym at the office

  • 💼 Financial wellness: SumUp contributes to your private retirement plan with Santander

  • 🧠 Mental well-being: access to Zenklub for therapy, coaching, and emotional wellness resources

  • 🍽 Meal support: benefit from a tax-free food voucher programme with Pluxee

  • 🌴 Break4me: 1-month sabbatical after 3 years of service

  • 🔗 Referral Bonus: earn additional rewards by referring talented individuals to join the SumUp team


About SumUp

Be empowered to do more that matters.

At SumUp, we're on a mission to empower small businesses across the globe by providing simple and affordable tools that allow them to thrive. Today, over 4 million businesses in 37 markets rely on SumUp as their financial partner to manage payments, finance and customer relationships.

Our commitment to small businesses is reflected in our diverse team of over 3,000 SumUppers from over 90 nationalities, united by global collaboration and an innovative mindset. Our core values lay the foundation for who we are and what we stand for, shaping our work culture and driving our success. We foster inclusivity and a continuous learning culture, providing a safe space for personal and professional growth. Our differences make us unique and strong as we strive to create an environment where everyone belongs and feels supported, no matter how they identify.

SumUp is proud to be an Equal Employment Opportunity employer, actively seeking and embracing diversity in our workforce. We don't make hiring or employment decisions based on race, colour, religion or religious belief, ethnic or national origin, nationality, sex, gender, gender identity, sexual orientation, disability, age or any other basis protected by applicable laws or prohibited by company policy. Our commitment extends beyond recruitment to creating a safe and respectful workplace where harassment of any form is strictly prohibited. Discover more about our culture and opportunities on our careers website, and follow our journey on LinkedIn, Instagram, and TikTok.

 

Job Application Tip

We recognise that candidates feel they need to meet 100% of the job criteria in order to apply for a job. Please note that this is only a guide. If you don’t tick every box, it’s ok too because it means you have room to learn and develop your career at SumUp.

Frequently Asked Questions

Is the salary disclosed for the Operational Risk Senior Analyst - GRC Tribe position at sumup?
The salary for this Operational Risk Senior Analyst - GRC Tribe role at sumup is not publicly listed. Click "Apply Now" to learn more about the compensation package on their official careers page.
Where is the Operational Risk Senior Analyst - GRC Tribe position at sumup located?
This Operational Risk Senior Analyst - GRC Tribe role at sumup is based in São Paulo, São Paulo, Brazil. The position is listed as on-site or hybrid. Check the full job description or apply directly to confirm the work arrangement.
Which team or department does the Operational Risk Senior Analyst - GRC Tribe at sumup belong to?
This Operational Risk Senior Analyst - GRC Tribe position is part of the Legal & Compliance department at sumup. See the full job description for more information about the team structure and responsibilities.
How do I apply for the Operational Risk Senior Analyst - GRC Tribe position at sumup?
Click the "Apply Now" button on this page. You will be redirected to sumup's official application portal hosted on greenhouse where you can submit your application directly.
When was the Operational Risk Senior Analyst - GRC Tribe job at sumup posted?
This Operational Risk Senior Analyst - GRC Tribe position at sumup was posted on Jul 21, 2026. Apply as soon as possible — early applications are often reviewed first.
Operational Risk Senior Analyst - GRC Tribe
sumup
Apply for this role ↗

You'll be redirected to sumup's official application page on Greenhouse.