Security Analyst

We're looking for experienced, creative and curious IT security Analyst to join Modulr.

Who is Modulr?

• Ranked 42 in Deloitte’s 2021 UK Technology Fast 50 companies.
• Raised $108m (£83m) in our Series C funding round led by General Atlantic top previous investments from Blenheim Chalcot and PayPal Ventures among others.
• Named an official Best Workplace by Great Places to Work in 2020.
• Ranked as the second fastest growing tech company in the UK by Dun & Bradstreet.

Modulr is a fintech scale-up that’s breaking new ground within the payments sector, developing cutting-edge API-first solutions that enable businesses to take control of their money. It’s our purpose to enable growth and innovation by making money move more efficiently.

What are our values?

We believe in The Modulr Way. Our Modulites work to:

• Build the extraordinary: Ambition and commitment
• Own the opportunity: Ownership and accountability
• Move at pace: Performance and quality
• Achieve it together: Honesty and respect

We look to build great things, collaboratively and collectively, and every Modulite is empowered to drive their own contribution.

Responsibilities

• Be a point of contact for the business in matters relating to IT security and assurance
• Work with the business to help identify security challenges that may be introduced
• Support the delivery of security awareness activities across Modulr helping to build a security culture
• Assist in maintaining security documentation, ensuring that Modulr’s security posture and compliance is maintained, promoting broader business awareness and continual improvement of security
• Support security risk management activities including assessments and treatment including the implementation of appropriate security controls
• Provide support during the performance and response to internal audits
• Support delivery of client security due diligence processes
• Work with internal stakeholders and external security partners to monitor Modulr systems and services to help identify and investigate any IT security incidents/events
• Support the reporting process to help provide management information relating to:
• Security risks
• Incidents, events, and near-misses
• Vulnerabilities
• Infrastructure and endpoint patching status
• Effectiveness of security awareness and controls across the business
• Performing regular access reviews across multiple environments and services
• Provide support when necessary to perform:
• Security testing including automated scanning and penetration testing
• Security event or incident investigation
• Security remediation
• Audit evidence gathering
• Performing security awareness and training

Skills and experience we are interested

• Understanding of IT infrastructure and services including AWS, Azure and Microsoft 365
• Understanding of IT security compliance regimes such as ISO 27001, Cyber Essentials and PCI DSS
• Understanding of IT security within financial services beneficial
• CompTIA Security/Security Plus or other IT security qualifications beneficial
• Ability to process information and produce comprehensive reports
• Experience of ISO 27001
• Knowledge of risk management including risk assessments and treatment
• Experience writing and maintaining procedures and process documentation
• Experience of vulnerability assessments, tooling and remediation