Security Assurance & GRC Lead

Remote Worker LTD.; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

Abound is formalising its security assurance function in London with a governance layer for auditors, funders and regulators. You will own the recurring assurance cycle end to end, manage third-party security programmes, and turn evidence into concise audit-ready material.

Essential experience includes 3+ years in information security assurance and hands-on ISO 27001. The role requires clear written English, collaboration with Procurement and Legal, and accountability for the assurance calendar

Qualifications

• Three or more years in information security assurance, GRC or security compliance.
• Experience with ISO 27001 ISMS or certification processes.
• Proven ability to respond to inbound security due diligence and vendor security assessments.
• Strong written English and ability to craft concise security documentation.

Responsibilities

• Own the annual assurance calendar and ensure evidence-backed outputs.
• Run third-party security due diligence and manage supplier risk registers.
• Lead vulnerability management, pen-test coordination and remediation tracking.
• Coordinate with security and engineering teams and communicate with external auditors.

Skills

Security governance and policy

Third-party security assessments

ISO 27001

Risk management

Clear written English

Education

ISO 27001 Lead Implementer

CISA/CISM/CCSP (desirable)

Job description

Abound is formalising its security assurance function in London with a governance layer for auditors, funders and regulators. You will own the recurring assurance cycle end to end, manage third-party security programmes, and turn evidence into concise audit-ready material.

Essential experience includes 3+ years in information security assurance and hands-on ISO 27001. The role requires clear written English, collaboration with Procurement and Legal, and accountability for the assurance calendar