Senior Security Analyst

Role overview A digital bank is hiring a Senior Security Analyst to join a central security function that acts as a front door for the wider business. The role blends supplier risk, assurance, governance, and advisory work, partnering with engineers, product teams, procurement, and risk colleagues to keep the bank secure as it scales.

Responsibilities - Assess new and existing third party suppliers by reviewing questionnaires, certifications, and supporting evidence to evaluate security posture and translate findings into actionable recommendations. - Lead and contribute to assurance activities, including control testing, PCI DSS assessments, regulatory reviews, and internal and external audits, driving remediation through to completion. - Improve security policies, procedures, and controls so they are practical, proportionate, and aligned with how teams actually operate. - Triage and respond to security questions and requests from across the business, escalating to specialists when needed and continuously improving the requester experience. - Review new products, technologies, and business changes alongside engineers and product teams, turning security and regulatory expectations into requirements that work in practice. - Use data, automation, and AI to simplify and scale security processes, while mentoring less experienced analysts.

Requirements - Strong organisational skills with a proactive, curious, and technically minded approach to information security. - Hands on experience with third party or supplier security assurance across the supplier lifecycle. - Familiarity with assurance frameworks such as ISO 27001, SOC 2, or NIST, and with PCI DSS, regulatory reviews, or internal and external audits. - Ability to interpret technical evidence, identify risks and control gaps, and communicate practical recommendations to non technical stakeholders. - Comfort working across multiple teams and disciplines, including engineering, product, procurement, and risk.

Nice to have - Experience applying data, automation, or AI tooling to security operations and assurance workflows. - Exposure to a fast moving digital or fintech environment.

Benefits and work setup - Salary range of £57,000 to £70,000 plus performance-linked incentive awards. - Based in London, Cardiff, or UK remote with ad hoc travel to London meetings. - Flexible working hours with a focus on outcomes over set schedules. - Annual learning budget of £1,000 for books, training, and conferences. - Company issued MacBook plus additional home office support for fully remote workers. - Additional benefits package beyond those listed.