Senior Security Analyst: Third-Party & Audit Lead (UK Remote)

Whereby; United States; On-site; USD 77,000 - 94,000; Full time

Benefits offered by this job

Incentive awards

Flexible working hours

£1,000 learning budget

Macbooks provided

Remote work setup support

Job summary

Monzo is seeking a proactive Senior Security Analyst to join its Security team. You will work across supplier security, audits, and governance to strengthen how we manage security risk as the business grows.

You'll review third party evidence, lead control testing and regulatory reviews, and partner with engineers, product teams and procurement to turn security into practical action while keeping user experience friction-free.

Qualifications

• Experience identifying and assessing security risks and recommending proportionate mitigations.
• Ability to review supplier questionnaires, security policies, penetration test reports and assurance evidence.
• Strong fundamentals in security concepts and the ability to discuss technical details clearly.

Responsibilities

• Deliver third party and supplier security assurance for new and existing suppliers.
• Lead and contribute to control testing, regulatory reviews and audits.
• Strengthen governance by improving policies and controls to reflect real-world workflows.
• Collaborate with engineers, product teams, procurement and security colleagues to manage risk.
• Turn security problems into clear, actionable outcomes and drive remediation.

Skills

Security risk assessment

Third party security

Supplier security assurance

Evidence review

Communication

Collaboration

Problem solving

Prioritisation

Tools

PCI DSS

ISO 27001

SOC 2

NIST

Job description

Monzo is seeking a proactive Senior Security Analyst to join its Security team. You will work across supplier security, audits, and governance to strengthen how we manage security risk as the business grows.

You'll review third party evidence, lead control testing and regulatory reviews, and partner with engineers, product teams and procurement to turn security into practical action while keeping user experience friction-free.