Senior Information Security Analyst
Hybrid
Full Time
#Security
#Fintech
#Payments
#Information Security
#Application Security
#Cloud Security
#AWS
#Vulnerability Assessment
#Penetration Testing
#Risk Analysis
#Incident Response
#GRC
#PCI DSS
At Runa, we are building the future of global finance by creating a first-of-its-kind payment rail designed for the speed of the modern world. While legacy banking systems struggle with the high-velocity demands of today, we provide a digital infrastructure that allows businesses to send money instantly and cost-free to anyone, anywhere. Our platform supports over 5 billion consumers across 190 countries, helping industry leaders like Coinbase, Sodexo, and Perkbox move beyond the inefficiencies of traditional payouts. We are looking for a passionate security professional to join our team and help us protect this mission as we scale.
The opportunity
As a Senior Information Security Analyst, you will be the guardian of our digital ecosystem. You will play a pivotal role in embedding robust security controls, policies, and processes throughout our organization. By working closely with our engineering and IT teams, you will ensure that security is not just an afterthought, but a core component of our product development lifecycle. Your expertise will directly influence how we handle global transactions, keeping our infrastructure resilient and compliant as we continue to grow.
A day in the life
- You will lead vulnerability assessments, manage external penetration testing, and perform deep risk analyses to proactively identify and mitigate potential threats across our applications and networks.
- You will collaborate with our engineering teams to champion security by design, leading threat modeling exercises and integrating best practices into our AWS-based technology stack.
- You will own our compliance posture by maintaining security policies and ensuring we meet rigorous standards such as ISO 27001, SOC 2, and PCI DSS.
Who you are
You are a seasoned security expert with a strong background in GRC and a deep understanding of the high-growth fintech landscape. You possess a solid grasp of cloud and application security, specifically within AWS environments, and you are comfortable navigating the complexities of software development lifecycles. You communicate clearly, solve problems with a self-starting attitude, and have a sharp eye for detail. While not required, certifications such as CISSP, CISM, or AWS credentials are highly valued, as is experience with DevSecOps tooling.
Why you'll love it here
We believe in supporting your professional growth and personal well-being. Our culture is built on flexibility and ownership, and we offer a comprehensive package to help you thrive:
- Equity compensation that gives you a real stake in our success.
- A hybrid work model with the ability to work from anywhere for up to 45 days per year.
- An annual learning budget of £1,000 plus five dedicated days for professional development.
- Unlimited vacation time, including 25 days of holiday plus public holidays and quarterly company-wide reset days.
- Comprehensive medical and dental insurance through Bupa.
- Enhanced maternity and paternity leave, offering up to 16 weeks of full pay for new parents.
