Own delivery of Zinc’s security roadmap, strengthen security standards and audit compliance, implement technical controls, and mature identity and access management. The role works cross-functionally with engineering and business teams on security improvements, including Google Workspace and AWS security, endpoint protection, threat intelligence, vulnerability management, MFA, JML processes, and RBAC. Success requires strong communication, prioritization, influencing, and pragmatic security leadership.
This is an exciting opportunity to join Zinc's Information Security team at a pivotal point in its journey. As an Information Security Analyst, you'll play a key role in shaping and strengthening how we approach security across the business, taking ownership of meaningful projects that will have a real impact on our people, products and technology. 💾
You'll have the opportunity to drive improvements, introduce new security practices and work closely with teams across the business to make security a shared priority. It's a hands-on role where you'll have plenty of scope to use your technical expertise, influence how things are done and help build a stronger, more resilient security environment as Zinc continues to grow. 🚀
You'll have the opportunity to drive improvements, introduce new security practices and work closely with teams across the business to make security a shared priority. It's a hands-on role where you'll have plenty of scope to use your technical expertise, influence how things are done and help build a stronger, more resilient security environment as Zinc continues to grow. 🚀
Key Responsibilities 🗝️
You'll have the opportunity to make a real impact on how Zinc approaches security. Some of your key responsibilities will include:
- 🗺️ Driving the Security Roadmap – take the lead on delivering our 2-year security roadmap, covering everything from workplace identity and cyber attack protection to workforce security, ecosystem resilience and secure software development.
- 🔍 Strengthening Our Security Standards – tackle outstanding audit findings and recommendations, putting the right improvements in place and helping us stay on top of compliance deadlines.
- 🤝 Bringing Teams Along on the Journey – work closely with engineering and other teams across the business to drive security improvements, influence decisions and get everyone moving in the same direction.
- 🛠️ Getting Hands-On – roll up your sleeves and get stuck into the technical work, from implementing new systems to rolling out important security controls.
- 🔐 Building Stronger Identity & Access Management – design, implement or mature IAM controls, including Multi-Factor Authentication (MFA), Joiner-Mover-Leaver (JML) processes and Role-Based Access Control (RBAC).
Skills, Knowledge and Expertise 🚀
You'll need experience with the following, as these are tools and technologies you'll be working with regularly in the role. We are looking for a candidate with the right motivation and interest in the space so, knowledge, understanding and equivalent exp will be considered!
- ☁️ Google Workspace (or equivalent) – practical experience managing and securing Google Workspace environments.
- 🖥️ AWS (or equivalent) – experience working with AWS environments and their security.
- 🔐 MDM (or understanding of) (Mobile Device Management) – understanding of device management and endpoint security.
- 🛡️ EDR (or understanding of) (Endpoint Detection and Response) – experience using EDR tools to monitor, detect and respond to threats.
- 🔎 Threat Intelligence & Vulnerability Management (or understanding of) – experience identifying potential threats, assessing vulnerabilities and helping to strengthen security across systems.
These are essential requirements rather than nice-to-haves, as you'll be working directly with these tools and technologies as part of your day-to-day responsibilities.
⭐ Nice-to-Have Experience
⭐ Nice-to-Have Experience
It would be a bonus if you also have experience with:
- 🛠️ OWASP SAMM / Secure SDLC maturity models – familiarity with application security frameworks and improving security practices throughout the software development lifecycle.
- 🔑 PIM / PAM Implementation – experience implementing Privileged Identity Management (PIM) or Privileged Access Management (PAM) solutions.
- 🎓 Industry Certifications – qualifications such as CISSP, CISM or CRISC.
These aren't essential, but they'd be a great addition to your experience and help you bring even more to the role!
We're looking for someone who can combine strong technical knowledge with the ability to bring people along with them. The following skills are essential to succeed in this role:
- 🧩 Cross-functional Leadership – ability to work collaboratively across different teams and drive security initiatives throughout the business.
- 💬 Influencing Without Authority – confidence in influencing and gaining buy-in from teams, particularly engineering, even when they don't report directly to you.
- ⚡ Prioritisation Under Pressure – ability to manage competing priorities, balance longer-term security projects with urgent demands and keep things moving.
- 📣 Clear Communication – able to explain technical concepts and security risks in a clear, accessible way to both technical and non-technical stakeholders.
- 💡 Pragmatism – able to balance the ideal security approach with practical business needs, finding solutions that strengthen security without slowing down delivery.
What we offer 🍉
- 24 days holiday + Bank Holidays + your birthday off 🎉
- £1200 annual benefits allowance (ThanksBen, from month 2)
- Early finish Fridays (16:00)
- Yearly company retreat abroad ✈️
- 30 days to Work from anywhere 🌍
- Enhanced Maternity, Paternity, and Adoption Leave (13 weeks full pay, 17 weeks half pay, then SMP for maternity, 1 month full pay for paternity/adoption) 🐣
- Statutory pension with NEST (3% employer, 5% employee)
- Zinc shares, issued through the EMI Scheme
- Unlimited access to Spill Therapy
- Company socials, quarterly team socials Free Monday lunches
- Nursery workplace benefit scheme (Yellownest)
- Option to lease an electric car through Electric Car Scheme
- Celebrated Zinc anniversaries 🥳
About
Who are Zinc? ⚡️We believe in better background checking: making them easy, instant and delightful - for candidates and HR teams across the world 🌎. Founded in 2017, we've grown year-on-year, reaching the Times Top 100 fastest growing businesses, the Deloitte EMEA fast 500 and winning the 2026 HSBC x WIRED Award in the Trailblazers Category.But we're not all work, our founders Luke and Charlotte are hot on being a culture first business. By this, we don't just mean an active calendar of company and team events (although these are great! 🍻 🥂🍕🎯) - our culture is defined by respect, fostering support for new ideas, promoting flexible work environments and operating with autonomy and low ego. 🔥💥❤️It's not just us who think they've done a stellar job - we've won awards for being a Top Place To Work in 2025 and 2026 from Tembo and SeedLegals 💚What are our values? 🧩🧩🧩Our values are: Pragmatism, Integrity, Empathy, Collaboration, Empowerment and Speed. We call them the PIECES that make Zinc (see what we did there 😂).How do we work? 🧑🏽💻👩🏼💻👨🏿💻We operate on a hybrid working model, with everyone coming to our Shoreditch Offices on Mondays and Thursdays, and working from home on the others. We believe this is a great balance between having space for deep work and in-person collaboration ⚡️⚡️⚡️
Similar Jobs
Digital Media • Gaming • Software • Esports • Automation
Manage vulnerability scanning and risk assessment across IT systems, coordinate testing and remediation, explain technical risks to business stakeholders, support governance and compliance requirements, monitor emerging threats, maintain documentation, and assist with internal and external audits.
Top Skills:
Pci DssVulnerability Scanning Tools
Digital Media • Gaming • Software • Esports • Automation
Manage vulnerability scanning across IT endpoints, assess security risks, coordinate specialist testing and remediation, and communicate patching priorities to technical and non-technical stakeholders. The role supports governance, regulatory compliance, audits, threat monitoring, documentation, project security requirements, and escalation of security issues while minimizing disruption to live operations.
Top Skills:
Pci DssVulnerability Scanning Tools
Professional Services • Transportation • Industrial • Manufacturing
Monitor and secure servers, Azure systems, networks, databases, and security platforms. Manage firewalls, Defender XDR, Sentinel, intrusion detection, patching, encryption, access controls, audits, penetration testing, and incident response. Investigate breaches and vulnerabilities, recommend remediation, maintain disaster recovery plans, research emerging threats, and coordinate with vendors to improve security and compliance.
Top Skills:
Antivirus SoftwareAzureData EncryptionDisaster RecoveryFortigate FirewallsIntrusion Detection SystemsKusto Query Language (Kql)Microsoft 365Microsoft Defender XdrMicrosoft SentinelNetwork AdministrationPenetration TestingSecurity AuditingTcp/IpWindows
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
