Cyber Risk and Compliance Analyst, Oodle Car Finance
Salary not provided
+ Discretionary Company Bonus Scheme
AWS
Azure
Junior and Mid level
Manchester
Motor finance company
Open for applications
Motor finance company
201-500 employees
FintechB2CCarsPersonal financeLendingFinancial ServiceseCommerce
Open for applications
Salary not provided
+ Discretionary Company Bonus Scheme
AWS
Azure
Junior and Mid level
Manchester
201-500 employees
FintechB2CCarsPersonal financeLendingFinancial ServiceseCommerce
Company mission
Our mission is to empower our customers. Delivering simple experiences, straightforward lending products, and compassionate support. We aim to instil confidence from the application to the final payment - and beyond.
Role
Who you are
- A minimum of two years' experience in a cyber risk / information security role
- Working knowledge of cyber risk frameworks (e.g. ISO 27001, NIST CSF)
- Hands-on experience with maintaining risk registers and conducting information risk assessments, including supplier risk assessments
- A good understanding of regulatory and compliance requirements such (e.g. PCI-DSS)
- Excellent communication skills, with the ability to articulate technical and risk concepts to diverse stakeholders
- A proactive and structured approach to managing tasks and stakeholders
- A collaborative mindset and a desire to strengthen the organisation’s security posture, in line with our business objectives
Desirable
- Certified qualifications such as CRISC, CISMP, CISM, CISSP, ISO 27001 Lead Implementer, or equivalent
- Experience working with GRC tools (e.g. OneTrust, Archer, Protecht)
- Awareness of cloud platforms and SaaS (e.g. Microsoft Azure, M365, AWS) and associated security risks
- An understanding of SYSC15 Operational Resilience (FCA Handbook)
- Exposure to incident management or support in data breach scenarios
What the job involves
- Monday – Friday (37.5 hours per week - hybrid)
- Maintain and operate the Cyber Risk Register, ensuring timely tracking and treatment of issues. Provide reporting for key governance committees
- Deliver the Information Risk Assessment Programme, engaging business and technical stakeholders to assess and manage cyber threats and risks
- Deliver Supplier Risk Assessments, working with procurement and business teams to assess and monitor third-party risk through the supplier life-cycle
- Facilitate and document Security Risk Exceptions
- Cyber Training and Awareness: Contribute to the design and rollout of security awareness content and phishing simulation programmes to embed a strong cyber culture
- Security Policy Framework: Support the ongoing development, maintenance, and communication of the organisation’s Security Policy framework, reviewing and updating policies and procedures to ensure alignment with good practice frameworks and business activities
- Cyber Security & Resilience Compliance: Coordinate compliance efforts across standards such as PCI-DSS, external/internal audit requirements, user access reviews, and FCA operational resilience requirements. Work closely with stakeholders to manage remediation actions and audit responses
- Support Cyber Incident Management: Act as a supporting resource in cyber incident response activities, working with security and technical teams to log, track and learn from incidents and near misses
Application process
- ☎️ Preliminary Interview (30 mins)
- 📹 Face to Face Interview (1 hr)
- 🏢 Stakeholder Interview (45 mins)
Our take
Oodle was founded in order to simplify car buying and ownership by providing an easy and transparent way of supplying buyers with car finance to facilitate a seamless and enjoyable customer experience.
It aims to revolutionise how people buy cars by prioritising customer needs and utilising modern technologies to update the used car market. Oodle primarily supplies loans to customers and puts them in contact with the UK's best-rated car dealers in a rapid digital procedure.
This customer-first, fully integrated digital retail experience is backed by powerful algorithms, their proprietary loan technology, machine learning, and Big Data infrastructure.
Oodle now has branches in Oxford, Manchester, and London, acquiring Carsnip in December 2018 to become their go-to car search engine provider.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (1 round)
Jan 2017
$81.1m
GROWTH EQUITY VC
Total funding: $81.1m
Company benefits
- 25 days holiday (plus bank holidays) increasing to 28 days after 3 years service.
- Private Medical - with reward schemes paid for you and your family.
- Health cash plan - for employee's and children to claim money back for dental, optical, etc
- Pension (5% Employer 4% Employee Contribution)
- Life Assurance - 4 x annual salary - benefit funded by Oodle
- Free breakfast, drinks and fruit in the office – you can help yourself to cereals, toast, fizzy drinks and lots of fruit
- Employee discounts – discounts you can access anywhere, anytime for all major shops.
- Oodle Academy - Learning and development opportunities
- 1 day volunteer day per year – an opportunity to give back to the community each year
- Mental health care – 6 free counselling sessions via our EAP (Employee Assistance Programme)
- Paid sick leave – enhanced company sick pay (6 weeks full pay)
- Mentoring Program
- Enhanced family leave – We offer up to 4 weeks’ paternity leave on full pay and 26 weeks’ maternity leave on full pay
Company values
- Think Customer: they're at the heart of everything we do
- Everyone’s a Builder: we’re in this together and we win as a team
- Embrace being Human: empathy and diversity make us stronger together
- Strive for Awesome: it's awesome when we do better every day
- Bravely Honest: we're honest with ourselves and everyone else
Articles
Leadership
Richard Gaskin
(CEO)Previously the COO of Ocorian. Prior tot that, they spent 7 years as the CEO at GE Capital.
Jonathan Clayton
(Founder & Director)Previously Managing Partner at Venn Partners, Managing Director at Credit Suisse and AIG Financial Products.
Diversity, Equity & Inclusion at Oodle Car Finance
Heidi (Physick )
- At Oodle, we don’t just finance cars – we finance people. We know that everyone is unique, shaped by their own circumstances, experiences, and moments in life. This belief in individuality applies not just to our customers, but to our employees too. That’s why Diversity, Equity, and Inclusion (DEI) matter so much to us – because embracing what makes us different is how we thrive together.
- Oodle is built on a shared set of beliefs, values, and behaviours that guide how we act and treat one another. Diversity, Equity, and Inclusion are at the heart of our culture because we know it’s not just good for business – it’s simply the right thing to do. We celebrate the unique experiences, perspectives, and contributions of every team member and are dedicated to creating a workplace where everyone feels seen, heard, and valued. A culture built on diversity and inclusion helps us grow as a team and better serve our customers.
- Why it matters We believe that diverse teams perform better and that an inclusive workplace leads to happier, more engaged employees. By embedding DEI into every aspect of what we do, we’re not just building a stronger company – we’re making a positive, lasting impact on our industry. We’re proud of what we’ve accomplished so far, but we’re just getting started. At Oodle, we’re committed to learning, growing, and leading by example, ensuring that everyone – inside and outside our organisation – feels empowered, included, and valued.
- We have DEI networks meeting monthly, covering Gender, REACH Network (Race, Ethnicity, and Cultural Heritage), LGBTQIA+ Network, Neurodiversity and Mental Health Network. Each group has at least one Executive Committee member involved.
- Our DEI networks are actively working towards our strategic goals, from implementing inclusive hiring practices to organising events, workshops, and campaigns that educate, inspire, and celebrate diversity.
- We run mandatory DEI training every year and for all new starters, and have a number related webinars available in our Oodle Academy.
- Launched Oodlechat Podcast series, where we share insightful discussions on key topics around DEI.
- Partners with ENEI, 30% Automotive Club, Women in Finance Charter and Race at Work Charter.
- Participants of 10,000 Black Intern programme.
- First ever Trailblazer Partner for the Women & Diversity in Credit Awards.
Share this job
View 2 more jobs at Oodle Car Finance