Senior Security Analyst

Responsibilities

• Our team is Monzo’s front door to Security, helping the whole business operate securely. This means you’ll get exposure to a wide range of business context and a broad mix of information security work. One day you might be assessing the security of a new supplier; the next you could be supporting an audit or assurance review, assessing the risks of a new product or technology change, updating a policy, or helping a team turn regulatory requirements into practical action.
• You’ll work closely with security specialists, engineers, product teams, third party risk, procurement, and colleagues from across Monzo to solve interesting problems and strengthen how we effectively manage security risk as we grow.
• Delivering third party security and supplier security assurance: assess new and existing suppliers, reviewing questionnaires, certifications, and other evidence to understand their security posture. Use your judgement to identify risks, translate technical findings into recommendations, and work with teams across Monzo to manage them throughout the supplier lifecycle. Help us build a more effective, scalable and industry-leading third party security capability as Monzo grows!
• Delivering security assurance activities: lead and contribute to control testing, PCI DSS assessments, regulatory reviews, and internal and external audits. Evaluate evidence, identify gaps and work with teams across Monzo to see findings and remediation through to completion.
• Supporting our Security Front Door: work alongside our other analysts to respond to security questions and requests from across Monzo, bringing in specialists when needed and finding ways to make the experience better for other Monzonauts.
• Helping teams build and change safely: work with engineers, product teams and other colleagues to understand what they’re trying to achieve. Review new products and technology or business changes, identify security risks and control gaps, and turn security and regulatory expectations into requirements that work in practice.
• Raising the bar for security: bring fresh perspectives to real-world security challenges, keep developing your own skills and knowledge, and help less experienced analysts grow.
• You understand security risk: you’re comfortable identifying and assessing security risks, and can recommend proportionate ways to manage them. Experience in third party security or supplier security assurance would be a bonus!
• You can manage competing priorities: you can juggle different pieces of work, keep people informed, and make sensible decisions about what needs attention or escalation.
• You enjoy collaborating: you like working with people across different disciplines, building strong relationships, and helping make security easier to do well.

Languages