GRC Security Specialist

• Join Abound as a GRC Security Specialist, working hybrid from London 3 days a week. • Help formalise the security assurance function at a fast-growing fintech lender. • Build the governance layer that proves security to auditors, funders and the FCA. • Own the recurring assurance cycle and run the third-party security programme. • Turn evidence into material that due diligence teams and certification auditors trust. • Help take Abound towards ISO 27001 certification.

• Bring 3+ years in information security assurance, GRC or security compliance. • Show experience in regulated financial services or another environment with real external audit pressure. • Bring hands-on ISO 27001 experience, either running an ISMS or taking one through certification. • Show experience running vendor security assessments and responding to inbound due diligence. • Read technical findings and form your own view on severity and real-world exploitability. • Write clear, concise English for external audiences. • Chase busy engineers and challenge suppliers with confidence.

• Bring experience in a cloud-native environment, ideally AWS. • Show experience scaling a control framework as an organisation grows. • Know UK operational resilience (SYSC 15A) and outsourcing requirements (SYSC 8). • Hold certifications such as CISM, CISA, CRISC, CCSP or ISO 27001 Lead Implementer or Lead Auditor.

• Run security due diligence on new suppliers and maintain a supplier tiering model. • Maintain supplier and outsourcing registers, including preparing for the FCA material third party register. • Own responses to security due diligence from funders, banks, investors and partners. • Build a reusable trust pack with an answer library, whitepaper and questionnaire pre-fills. • Run the annual assurance calendar, including pen tests, access reviews, DR tests and tabletop exercises. • Maintain the information security risk register and policy exception process. • Consolidate and track vulnerability findings across EDR, cloud, SAST/DAST and pen tests. • Run the security awareness programme, including phishing simulations and engineer training. • Support ISO 27001 evidence, incident response, business continuity and data protection work.

Abound is one of the most exciting fintech stories in the UK right now. In just five years, the co-founders have built a profitable, fast-growing lending platform that was named the UK's number one fastest-growing tech company by The Sunday Times in 2026, with nearly 500% annual revenue growth. The company generated £69 million in revenue and £9 million in profit before tax in 2024, which is remarkable given that, among the top 15 high-growth UK companies tracked by Sifted, Abound was the only profitable one. They have secured £2.2 billion in lending capacity from Citi, Deutsche Bank, Waterfall, and others, and have been listed among the top 250 global fintechs by CNBC. What makes Abound especially interesting as a place to work is the leadership pedigree: Gerald Chappell was previously a Partner at McKinsey and EY, where he led digital lending and credit analytics solutions globally, while Dr Michelle He was a Director at EY with a PhD in machine learning. The broader leadership team brings experience from Goldman Sachs, Citi, Airbnb, and other major institutions. The UK Glassdoor entity sits at 4.6/5, with every single employee recommending it to a friend. What comes through in reviews is the flat structure, data-driven culture, quick career progression, and the chance to learn directly from seriously experienced leaders. Everyone gets equity ownership, a 30-day paid sabbatical after 4 years, a free WellHub membership, and plenty of team socials. A couple of things worth knowing: some Glassdoor reviews flag high targets and performance pressure, and Abound runs a hybrid model from its London offices rather than being fully remote. That said, if you want to be part of a profitable, rapidly scaling UK fintech where your work has a real impact on making credit fairer for millions of people, Abound is a brilliant place to do it.

• Receive equity so you own a piece of the company. • Work hybrid with 3 days a week in the office. • Take 25 days’ holiday plus 8 bank holidays and 2 paid volunteering days. • Get a one-month paid sabbatical after 4 years. • Access an employee loan and free gym membership through WellHub. • Use a team wellness budget for activities such as yoga, tennis or bouldering.

Abound is a UK consumer lender using AI and Open Banking data to make fair, affordable personal finance available to more people. It has issued over £1.3 billion in loans with market-leading credit performance and reached profitability just 2.5 years after launch. Backed by £2 billion+ in funding from investors including Citi and Deutsche Bank, Abound is one of Europe’s fastest-growing fintechs.