Senior Security Analyst

Salary: £30,000 - 50,000 per year

Requirements:

• Were looking for someone who can identify and assess security risks and recommend proportionate ways to manage them; experience in third-party or supplier security assurance is a bonus.
• You can evaluate security evidence, including supplier questionnaires, security policies, penetration test reports, and assurance materials, and know when to investigate further.
• You have strong security fundamentals, understand core security concepts and good practice, and are comfortable exploring technical details with curiosity.
• You look for patterns and root causes, use evidence and data to prioritise, and identify opportunities to improve how work gets done.
• You can make progress independently, find the information you need, and challenge assumptions constructively.
• You can manage competing priorities, keep people informed, and make sensible decisions about what needs attention or escalation.
• You communicate security risks and recommendations clearly to technical and non-technical audiences.
• You collaborate effectively across disciplines, build strong relationships, and help make security easier to do well.
• Youre passionate about cyber security, keep up with the evolving industry, and are motivated to develop your knowledge and skills.
• Experience in financial services, fintech, or another highly regulated environment would be beneficial.
• Experience supporting PCI DSS, ISO 27001, SOC 2, or NIST-aligned assurance, regulatory reviews, or internal and external audits would be beneficial.

Responsibilities:

• Assess new and existing suppliers by reviewing questionnaires, certifications, and other evidence; identify security risks, make recommendations, and work with teams to manage risks throughout the supplier lifecycle.
• Help us build an effective, scalable third-party security capability as we grow.
• Lead and contribute to control testing, PCI DSS assessments, regulatory reviews, and internal and external audits; evaluate evidence, identify gaps, and work with teams to complete remediation.
• Improve our security policies, procedures, and controls so they are practical, proportionate, and reflect how we work.
• Work with fellow analysts to respond to security questions and requests across Monzo, involve specialists when needed, and improve the experience for colleagues.
• Take ownership of loosely defined security problems, clarify desired outcomes, determine a way forward, and bring in the right people.
• Work with engineers, product teams, and other colleagues to understand their goals, review new products, technologies, and business changes, identify security risks and control gaps, and turn security and regulatory expectations into practical requirements.
• Use data, automation, and AI to simplify and scale our processes, and explore ways technology can help us work more effectively.
• Bring fresh perspectives to security challenges, continue developing your expertise, and support the growth of less experienced analysts.

Technologies:

• AI
• Support
• LESS
• MacBook
• Security

More:

Were Monzo, and our mission is to make money work for everyone. Weve grown from a prepaid card into a provider of personal and business accounts, joint accounts, accounts for 16–17-year-olds, kids accounts, credit cards, and services to save, invest, and combine pensions. We want to solve problems and change lives, while keeping our bank safe and secure. Were hiring a Senior Security Analyst for our Security team, which works across the business to help teams manage security risks without unnecessary friction or harm to the user experience. The role can be based in London or Cardiff, or worked remotely within the UK, with occasional meetings in London. The salary is £57,000–£70,000, plus performance-linked incentive awards and benefits. We offer flexible working hours, an annual £1,000 learning budget, a MacBook, and additional home-working support for fully remote employees. Our recruitment process includes a recruiter call, a 30-minute hiring-manager call, and two hours of technical and behavioural interviews; it usually takes around four to five weeks, and we aim to be flexible. Were committed to equal opportunity, diversity, and inclusion, and encourage applications from people who are interested in the role even if they dont meet every listed preference.

last updated 40 week of 2026