Senior Security Analyst — Risk & Assurance Leader

Monzo; United Kingdom; On-site; GBP 85,000 - 120,000; Full time

Benefits offered by this job

Salary review

Flexible hours

Work From Home equipment paid

Holiday 24 days + bank holidays

Employee Assistance Programme

Health insurance

Learning budget

Pension scheme

Parental leave

Caregiver leave

Life insurance

Fertifa benefits

Travel tickets

Cycle-to-work

Job summary

Monzo is seeking a Senior Security Analyst to join its Security team and help manage security risk as the bank scales. You’ll assess supplier security, lead control testing and audits, and translate regulatory expectations into practical requirements.

The role blends policy improvement with hands-on analysis and cross-functional collaboration. You’ll work with engineers, product teams, and procurement to turn findings into actionable risk mitigations while maintaining user experience and

Qualifications

• You’re proactive: you can make progress independently, seek out the information you need, and are comfortable challenging assumptions to move things forward
• You’re passionate about security: you’re excited by the challenges and opportunities in cyber security, keep up with an evolving industry, and are motivated to continue developing your knowledge and skills
• You’re a clear communicator: you can explain security risks and recommendations to technical and non-technical audiences in a way that works for them
• You think beyond the task in front of you: you look for patterns and root causes, use evidence and data to prioritise and look for ways to make things work better
• You can manage competing priorities: you can juggle different pieces of work, keep people informed, and make sensible decisions about what needs attention or escalation
• You can evaluate security evidence: you can review supplier questionnaires, security policies, penetration test reports and assurance evidence, and know when to dig deeper
• You understand security risk: you’re comfortable identifying and assessing security risks, and can recommend proportionate ways to manage them. Experience in third party security or supplier security assurance would be a bonus!
• You have strong security fundamentals and technical curiosity: you understand core security concepts and good practice, are comfortable getting into technical detail, and ask thoughtful questions to get to the heart of a problem
• You enjoy collaborating: you like working with people across different disciplines, building strong relationships, and helping make security easier to do well
• You’ve worked in financial services, fintech, or another highly regulated environment
• You’ve supported PCI DSS, ISO 27001, SOC 2 or NIST-aligned assurance, regulatory reviews, or internal and external audits

Responsibilities

• Delivering third party security and supplier security assurance: assess new and existing suppliers, reviewing questionnaires, certifications, and other evidence to understand their security posture.
• Lead and contribute to control testing, PCI DSS assessments, regulatory reviews, and audits; identify gaps and drive remediation with teams.
• Strengthening governance: improve security policies, procedures and controls to be practical and reflect reality.
• Supporting our Security Front Door: respond to security questions and requests, bringing in specialists as needed.
• Taking ownership: turn loosely defined security problems into clear outcomes and drive them forward.

Skills

Proactive

Security mindset

Clear communicator

Risk assessment

Third party security

Audits & assurance

Data-driven

Collaboration

Fintech domain

Job description

Monzo is seeking a Senior Security Analyst to join its Security team and help manage security risk as the bank scales. You’ll assess supplier security, lead control testing and audits, and translate regulatory expectations into practical requirements.

The role blends policy improvement with hands-on analysis and cross-functional collaboration. You’ll work with engineers, product teams, and procurement to turn findings into actionable risk mitigations while maintaining user experience and