The opportunity
🚀 We’re on a mission to make money work for everyone.
What you'll do
Delivering third party security and supplier security assurance: assess new and existing suppliers, reviewing questionnaires, certifications, and other evidence to understand their security posture. Use your judgement to identify risks, translate technical findings into recommendations, and work with teams across Monzo to manage them throughout the supplier lifecycle. Help us build a more effective, scalable and industry-leading third party security capability as Monzo grows!
Delivering security assurance activities: lead and contribute to control testing, PCI DSS assessments, regulatory reviews, and internal and external audits. Evaluate evidence, identify gaps and work with teams across Monzo to see findings and remediation through to completion.
Strengthening our governance: improve security policies, procedures and controls so they’re practical, proportionate, and reflect how things work in reality.
Supporting our Security Front Door: work alongside our other analysts to respond to security questions and requests from across Monzo, bringing in specialists when needed and finding ways to make the experience better for other Monzonauts.
Taking ownership and running with it: turn loosely defined security problems into clear outcomes, work out the best way forward, and bring in the right people to make it happen.
Helping teams build and change safely: work with engineers, product teams and other colleagues to understand what they’re trying to achieve. Review new products and technology or business changes, identify security risks and control gaps, and turn security and regulatory expectations into requirements that work in practice.
What they're looking for
- Improving how we work: use data, automation and AI to make our processes simpler and more scalable, while exploring new ways technology can help us work smarter.
- Raising the bar for security: bring fresh perspectives to real-world security challenges, keep developing your own skills and knowledge, and help less experienced analysts grow.
- You understand security risk: you’re comfortable identifying and assessing security risks, and can recommend proportionate ways to manage them. Experience in third party security or supplier security assurance would be a bonus!
- You can evaluate security evidence: you can review supplier questionnaires, security policies, penetration test reports and assurance evidence, and know when to dig deeper.
