GRC Security Specialist

Join Abound, a fast-growing fintech company redefining consumer lending in the UK and beyond. As a GRC Security Specialist, you will be responsible for formalizing our security assurance function, running our third-party security program, and maintaining the annual calendar of security activities. You will also contribute to the ISO 27001 ISMS, policies and standards, incident response, business continuity and disaster recovery, secure development, and data protection.

Responsibilities

• Run security due diligence on new suppliers, maintain initial questionnaire to risk sign-off, working with Procurement and Legal on security and data protection schedules.
• Own our response to security due diligence from funders, banking partners, institutional investors, commercial partners and prospects.
• Maintain the annual calendar of security activities and make sure each one happens, produces evidence, and closes its actions: penetration tests, access reviews, disaster recovery tests, tabletop exercises, policy reviews, supplier re-assessments, awareness training.