Information Security Risk Analyst II

Information Security Risk Analyst II | Go Henry

GoHenry is a UK-based fintech company created by parents to pioneer financial education. More recently, GoHenry moved into Europe and the US by joining forces with French fintech company Pix Pay and US investing app Acorns. Together, Acorns, Pix Pay, and GoHenry have over 6 million members across 5 countries. We are focused on empowering families with engaging money management tools, educational content, and a seamless product experience that creates financial well‑being from birth to adulthood.

We are looking for an Information Security Risk Analyst II to support the security of GoHenry’s financial education platform by identifying, analyzing, and mitigating information security risks. You will be part of the Global Infosec organization and will work closely with the US Infosec team. You will play a crucial role in maintaining our compliance posture and fostering a strong security culture.

• Risk Assessment and Analysis
  • Conduct comprehensive risk assessments to identify vulnerabilities and potential threats.
  • Analyze and prioritize risks based on GoHenry's business context, impact, and likelihood. Provide actionable recommendations for risk mitigation.
• Compliance and Audits
  • Develop and maintain security policies in line with industry standards.
  • Support audit (SOC 2, PCI DSS) and compliance activities concerning cyber regulations relevant to the UK/EU/US financial sector.
• Identity and Access Management
  • Manage Identity and Access Governance.
  • Conduct quarterly access reviews and periodic role certification by system owners.
• Cyber Security
  • Support Application Security team in matters relating to secure development lifecycle and security testing.
  • Support Cloud Security team in continuously monitoring security controls across cloud environments, focusing on configuration assurance.
  • Work with the IT team to ensure the effectiveness of our endpoint security solutions.
• Training and Awareness
  • Develop and deliver training programs to enhance security awareness among employees.
  • Foster a culture of security within the organization.
• Collaboration and Communication
  • Communicate cyber security issues, product requirements and risks to stakeholders and senior management in a manner that is consistent with GoHenry's business context.

You are a detail‑oriented security professional with a strong understanding of both technical security controls and regulatory compliance in a fast‑paced fintech environment.

• Minimum of 4 years of experience in the Information Security / GRC domain.
• Proven experience in an Information Security, Cyber Security, or IT Risk role.
• Hands‑on experience performing formal risk assessments and managing risk registers.
• Working knowledge of major security frameworks and regulatory requirements (e.g., ISO 27001, PCI DSS, SOC 2, GDPR).
• Familiarity with concepts like secure development lifecycle, cloud security principles (AWS/Azure/GCP), and identity/access management.
• Exceptional ability to translate complex technical risks into clear, business‑focused language for both technical and non‑technical audiences.
• Relevant industry certifications such as CISSP, CISM, CRISC, or similar are a plus.
• Hands‑on experience with security tools and scripting will be a key differentiator.

We offer a competitive package and a culture that supports your professional growth, physical, and mental well‑being.

• GoFlex – Work from Home, Office, or a mix of both.
• Your Birthday Day off.
• 25 days annual leave, in addition to 8 UK bank holidays.
• An excellent induction & onboarding program with ongoing learning & development throughout your career.
• A choice between Bupa Health Cash Plan or Bupa Private Medical.
• Death in service – 4×your annual salary from month 1.
• Physical and mental wellbeing support and platforms for you and your family.
• Family‑friendly leave policies:
  • Enhanced maternity leave – 20 weeks full basic pay after 2 years’ service and 26 weeks full basic pay after 3 years’ service.
  • Paternity leave – 4 weeks full pay after probation.
• Salary sacrifice options.

We’re on a mission to help every kid…