Internal Auditor - Security

This is Adyen

Adyen provides payments, data, and financial products in a single solution for customers like Meta, Uber, H&M, and Microsoft - making us the financial technology platform of choice. At Adyen, everything we do is engineered for ambition.

For our teams, we create an environment with opportunities for our people to succeed, backed by the culture and support to ensure they are enabled to truly own their careers. We are motivated individuals who tackle unique technical challenges at scale and solve them as a team. Together, we deliver innovative and ethical solutions that help businesses achieve their ambitions faster.

Internal Auditor - Technology

We’re looking for a proactive Internal Auditor with a focus on technology and security risks to help Adyen build an ethical, resilient, and sustainable business.

In this role, you will provide independent, risk-based assurance and advice across Adyen’s technology landscape. You will work on audits covering areas such as infrastructure, cloud, identity and access management, software development, cyber security, resilience, and the controls that support our regulated financial platform.

You will work closely with teams globally across Engineering, Security, Product, Risk, Compliance, and others. This role sits in Internal Audit reporting to the team lead in Amsterdam and is part of Adyen’s third line of defence. That means you are independent, but never distant: you understand the business deeply, take deep interest in technology and security, ask sharp questions, and help management make better decisions.

This role is based out of our Amsterdam office. We are an office-first company and value in-person collaboration.

What you’ll do

• Prepare, execute, and report on technology and security internal audit assignments across Adyen’s global business.
• Assess whether technology and security risks are being identified, managed, and escalated appropriately across first and second line functions.
• Provide management with an independent view on the effectiveness of governance, risk management, and internal controls.
• Evaluate the design and operating effectiveness of controls in areas such as cloud environments, infrastructure, networks, SDLC, change management, vulnerability management, identity and access management, logging and monitoring, incident response, and resilience.
• Translate technical observations into clear audit findings, practical recommendations, and meaningful insights for both technical and non-technical stakeholders.
• Stay up to speed on changes in Adyen’s products, architecture, threat landscape, and regulatory environment, and use those insights in risk assessment and audit planning.
• Identify opportunities to improve Internal Audit’s methodology, use of data, automation, and overall effectiveness.
• Build strong working relationships across the business and become a trusted