Cyber Security Analyst

Lendable Ltd; City Of London; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading fintech company in London is seeking a Cyber Security Analyst to help secure its growing platform. This role requires proven experience in security governance and compliance. The ideal candidate will handle vendor assessments and be familiar with security frameworks like ISO 27001 and PCI DSS. Participating in exciting projects within a collaborative team, the role offers flexible working options, with full compensation and benefits including private health insurance.

Benefits

Best-in-class compensation

Remote work options Monday and Friday

Fully stocked kitchen

Private health insurance

Inclusive workplace initiatives

Qualifications

• Proven experience as a Security Analyst or similar role.
• Practical experience in vendor security assessments.
• Good working knowledge of common security frameworks.
• Awareness of AI-powered security tooling.
• Excellent communication skills.

Responsibilities

• Review inbound requests from the Secure Operations Centre.
• Execute vendor security assessments and due diligence.
• Assist in maintaining compliance with regulatory frameworks.
• Translate high-level security policies into actionable standards.
• Document and track identified risks.

Skills

Security Analyst experience

Vendor security assessments

Knowledge of security frameworks

AI-powered security tooling awareness

Excellent communication skills

Tools

GitHub

Terraform

Python

GRC platforms

Job description

About Lendable

Lendable is on a mission to build the world's best technology to help people get credit and save money. We're building one of the world's leading fintech companies and are off to a strong start:

• One of the UK's newest unicorns with a team of just over 600 people
• Among the fastest-growing tech companies in the UK
• Profitable since 2017
• Backed by top investors including Balderton Capital and Goldman Sachs
• Loved by customers with the best reviews in the market (4.9 across 10,000s of reviews on Trustpilot)

So far, we've rebuilt the Big Three consumer finance products from scratch: loans, credit cards and car finance. We get money into our customers' hands in minutes instead of days.

We're growing fast, and there's a lot more to do: we're going after the two biggest Western markets (UK and US) where trillions worth of financial products are held by big banks with dated systems and painful processes.

Join us if you want to

1. Take ownership across a broad remit. You are trusted to make decisions that drive a material impact on the direction and success of Lendable from day 1
2. Work in small teams of exceptional people, who are relentlessly resourceful to solve problems and find smarter solutions than the status quo
3. Build the best technology in-house, using new data sources, machine learning and AI to make machines do the heavy lifting

About the role

We are looking for a hands-on Cyber Security Analyst to join our InfoSec team and help secure our growing platform and products. This role requires an analyst with a good grasp of security governance, ensuring we maintain a high standard of security, operational resilience, and regulatory compliance as we scale.

What you'll be doing

• Security Operations: Reviewing inbound requests from the Secure Operations Centre and helping to prioritise and raise awareness of security events.
• Vendor Security Reviews: Execute vendor security assessments and due diligence reviews for new and existing third-party suppliers, maintaining required documentation for the Vendor Governance Forum.
• Audit Support: Assist the team in achieving and maintaining compliance with key regulatory and industry frameworks, including GDPR, ISO 27001, SOC 2, and PCI DSS, by working with stakeholders to gather evidence and documenting controls.
• Policy & Standards: Help translate high-level security policies into practical, actionable security standards and control requirements for engineering teams.
• Risk Reporting: Document and track identified risks from AppSec, vendor reviews, and operations, ensuring they are accurately captured and reported.
• Security Training: Support the delivery of security awareness and training programs tailored for technical and non-technical staff.
• Security Programmes: Working with Product teams to execute and improve security programmes such as Disaster Recovery.

What we're looking for

Experience & Skills

Proven experience as a Security Analyst, or similar role

Practical experience in conducting vendor security assessments and performing technical due diligence on third parties

Good working knowledge of common security frameworks and regulations (e.g., ISO 27001, SOC 2, PCI DSS), with experience supporting audit processes

Awareness or practical experience with AI-powered security tooling (e.g., AI-driven monitoring, generative AI for code review, or AI defense mechanisms)

Excellent communication skills, capable of explaining complex security concepts to both technical and non-technical audiences

Desirable

• Experience with Engineering and Automation tooling (e.g., GitHub, Terraform, Python)
• Experience with GRC platforms (e.g., Vanta, Drata)

Interview process

• Intro Call with People Team: A brief conversation to get to know you and your background
• Call with InfoSec team member: A deeper dive into your experience and how it aligns with our vision
• Technical and Cultural Interview: A deeper where you'll meet with several team members and stakeholders to discuss your motivations and expertise, and your approach to delivery and collaboration

Life at Lendable

• The opportunity to scale up one of the world's most successful fintech companies.
• Best-in-class compensation, including equity.
• You can work from home every Monday and Friday if you wish - on the other days, those based in the UK come together IRL at our Shoreditch office in London to be together, build and exchange ideas.
• Enjoy a fully stocked kitchen with everything you need to whip up breakfast, lunch, snacks, and drinks in the office every Tuesday-Thursday.
• We care for our Lendies' well-being both physically and mentally, so we offer coverage when it comes to private health insurance
• We're an equal-opportunity employer and are looking to make Lendable the most inclusive and open workspace in London

Check out our blog!