Senior Security Analyst

Responsibilities

We are representing a confidential fintech organization seeking a Senior Security Analyst to join their security team in Cardiff. This is a client-facing security role where you'll serve as a key point of contact for security across the business.

In this position, you will:

• Deliver third party security and supplier security assurance by assessing new and existing suppliers, reviewing questionnaires, certifications, and evidence to understand their security posture. Use your judgment to identify risks, translate technical findings into recommendations, and work with teams to manage them throughout the supplier lifecycle.
• Lead security assurance activities including control testing, PCI DSS assessments, regulatory reviews, and internal and external audits. Evaluate evidence, identify gaps, and work with teams to see findings and remediation through to completion.
• Strengthen governance by improving security policies, procedures, and controls to ensure they're practical, proportionate, and reflect operational reality.
• Support security operations by responding to security questions and requests from across the organization, bringing in specialists when needed and improving the experience for colleagues.
• Take ownership of loosely defined security problems, turn them into clear outcomes, determine the best path forward, and bring in the right people to make it happen.
• Help teams build and change safely by working with engineers and product teams to review new products, technology, and business changes. Identify security risks and control gaps, and turn security and regulatory expectations into practical requirements.
• Improve processes using data, automation, and AI to make workflows simpler and more scalable.
• Raise the security bar by bringing fresh perspectives to real-world challenges, developing your own skills, and mentoring less experienced analysts.

What We're Looking For

Our client is seeking candidates with strong security fundamentals and the ability to balance technical depth with business pragmatism. The ideal candidate will have:

• Strong understanding of security risk assessment and the ability to recommend proportionate ways to manage risks. Experience in third party security or supplier security assurance is a bonus.
• Ability to evaluate security evidence including supplier questionnaires, security policies, penetration test reports, and assurance documentation, knowing when to dig deeper.
• Solid security fundamentals and technical curiosity, with understanding of core security concepts and good practices. Comfortable getting into technical detail and asking thoughtful questions.
• Strategic thinking beyond immediate tasks—looking for patterns and root causes, using evidence and data to prioritize, and identifying ways to improve processes.
• Proactive approach to work with ability to make progress independently, seek out needed information, and challenge assumptions constructively.
• Strong ability to manage competing priorities, keep stakeholders informed, and make sensible decisions about what needs attention or escalation.
• Clear communication skills with ability to explain security risks and recommendations to both technical and non-technical audiences.
• Collaborative mindset with enjoyment of working across different disciplines, building relationships, and making security easier to implement.
• Genuine passion for security with excitement about challenges and opportunities in cyber security, commitment to keeping up with industry evolution, and motivation to develop your knowledge and skills.

Preferred but not required:

• Experience in financial services, fintech, or another highly regulated environment.
• Background supporting PCI DSS, ISO 27001, SOC 2, or NIST-aligned assurance, regulatory reviews, or internal and external audits.

How We Work With You

As Get A Job.ai, we partner with leading organizations to connect exceptional talent with confidential opportunities. When you apply through our platform at getajob.ai, here's what happens:

• Our talent team will review your application and conduct an initial screening to understand your background and career goals.
• If there's a strong match, we'll submit your profile to our client for consideration.
• Our client's interview process typically includes an intro call with their recruiter, a 30-minute call with the hiring manager, and 2 hours of technical and behavioral interviews over approximately 4-5 weeks.
• We'll support you throughout the entire process and coordinate all communications.

Important: Please apply only through Get A Job.ai. Do not attempt to contact the client directly, as this may disqualify your application.

Pay

This role is based in Cardiff with UK remote options (ad hoc meetings in London may be required). The position offers flexible working hours with trust-based time management. Our client provides a £1,000 annual learning budget, home office setup support including MacBook, and additional benefits.

Compensation details will be discussed during the screening process.

Equal Opportunity: Get A Job.ai is committed to fostering an inclusive environment. We evaluate all candidates based on qualifications and potential. All applicants will be considered without regard to age, ethnicity, religion, sex, sexual orientation, gender identity, family status, national origin, veteran status, neurodiversity, or disability status.