Remote opportunity at
MonzoSenior Security Analyst
Monzo, a UK bank offering personal and business accounts, joint accounts and credit cards, is hiring a Senior Security Analyst for its Security team. The team…
Career Tools
About This Role
Monzo, a UK bank offering personal and business accounts, joint accounts and credit cards, is hiring a Senior Security Analyst for its Security team. The team is the central entry point for security questions across the company, so the work varies widely: one day may involve assessing a new supplier, and the next may involve supporting an audit, weighing the risks of a product change, or helping a team translate…
Job Description
Monzo, a UK bank offering personal and business accounts, joint accounts and credit cards, is hiring a Senior Security Analyst for its Security team. The team is the central entry point for security questions across the company, so the work varies widely: one day may involve assessing a new supplier, and the next may involve supporting an audit, weighing the risks of a product change, or helping a team translate regulatory expectations into everyday actions.
The analyst would work alongside specialists in security, engineering and product, plus third-party risk and procurement staff. Responsibilities include assessing third-party and supplier security, testing controls, supporting PCI DSS assessments and regulatory reviews, and helping audit findings reach resolution. The role also covers refining security policies and controls so they stay proportionate and workable, reviewing new products and technology changes for control gaps, and using machine assistance and AI tools to simplify how security processes grow.
Applicants should understand security risk and be able to propose proportionate ways of managing it. The posting asks for the ability to review supplier questionnaires, security policies and penetration test reports, and to judge when deeper investigation is needed. Clear communication with technical and non-technical audiences and the ability to work independently are also required. Experience in third-party or supplier assurance is a stated bonus, as is work within financial services, fintech or another tightly regulated sector.
The base salary is £57,000 to £70,000, plus incentive awards linked to individual performance. The London office is the base, with distributed working across the UK possible and occasional meetings in London. The hiring steps are an introductory recruiter call, a 30-minute call with the hiring manager, and a two-hour technical and behavioural session. The posting says the process usually takes four to five weeks.
Responsibilities
- Assess new and existing suppliers by reviewing questionnaires, certifications and other security evidence
- Test controls, assist with PCI DSS work and regulatory reviews, and support internal and external audits
- Help audit findings and remediation actions reach resolution
- Make security policies and controls more practical and proportionate
- Respond to security questions from across the business and bring in specialists when needed
- Review new products, technology and business changes for security risks and control gaps
- Apply data, automation and AI to simplify and scale security processes
- Coach less experienced analysts and share good practice
Requirements
- Understanding of security risk and the ability to recommend proportionate mitigations
- Ability to evaluate security evidence, including penetration test reports and policies
- Solid security fundamentals and technical curiosity
- Capacity to work independently, manage competing priorities and escalate sensibly
- Clear communication with technical and non-technical audiences
- Willingness to collaborate across many disciplines
Qualifications
- Exposure to supplier security assurance or third-party risk work (described as a bonus)
- Work within financial services, fintech or another tightly regulated sector
- Familiarity with frameworks such as ISO 27001, SOC 2, PCI DSS or NIST, and with audits
Core Skills
Benefits
- Incentive awards tied to individual performance
- Annual learning allowance of £1,000 for books, courses and conferences
- Flexible working hours
- Home-working setup support and a MacBook, with extra support for fully remote staff
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is the role based?
The posting lists London, Cardiff or remote UK, and says the role can be based in the London office with distributed working across the UK and occasional London meetings.
What is the salary?
The base salary is £57,000 to £70,000, plus incentive awards tied to performance.
Is prior experience in a regulated sector required?
It is listed as helpful rather than essential, and familiarity with frameworks such as PCI DSS or ISO 27001 is also described as beneficial.
How long is the hiring process?
The posting says it usually takes four to five weeks and includes a recruiter call, a hiring manager call and a technical and behavioural interview session.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.