Are you an Information Security Auditor with experience in PCI DSS & ISO 27001, ready to drive our organisation\'s compliance?
Thredd is looking for an Information Security Auditor to join our Info Sec team based out of our London office.
What you\'ll be doing as an InfoSec Auditor
- Stay informed on emerging regulations and governance standards to maintain the organisation\'s forward-looking security posture
- Conduct comprehensive risk assessments to identify, evaluate, and mitigate risks related to governance, data security, and compliance. Effectively respond to third-party requests for information, ensuring alignment with contractual and regulatory obligations.
- Perform thorough audits of security controls, processes, and systems to ensure compliance with organisational governance policies and industry standards such as ISO 27001, SOC 2, and PCI DSS.
- Assess the effectiveness of internal governance frameworks, identify areas for improvement, and propose actionable recommendations. Monitor adherence to governance frameworks, escalating non-compliance issues as necessary.
- Develop and deliver engaging training sessions to employees on internal governance standards and compliance best practices, enhancing overall security awareness.
- Address day‑to‑day risk management tasks and respond promptly to security alerts, ensuring swift and effective resolution of potential threats.
- Oversee supplier relationships and conduct thorough vendor/client onboarding reviews to maintain security standards across the organisation\'s network
- Implement and maintain systems to track security performance and compliance posture over time, providing insights for continuous improvement.
- Assist in the preparation and execution of internal audits, and help coordinate external audit processes to ensure organisational readiness and compliance.
What you will bring to the Infosec Auditor role
- Proven experience in a similar role, ideally within financial services industry
- Prior interaction with security frameworks - particularly PCI DSS and ISO 27001
- Understanding of regulatory reporting and compliance
- Bachelor\'s degree in Computer Science, Information Security, or a related field, or equivalent experience
- Basic knowledge of IT security controls
- Prior experience and understanding of security audits, compliance assessments and internal security reviews
- A natural problem solver with strong analytical skills
- Collaborate effectively not only with immediate InfoSec team but cross-functionally on a global scale
Where you\'ll work
Our working model varies depending on the specific role and team requirements. We strive to provide flexibility whilst ensuring that each position is best supported for optimal collaboration and performance.
This position requires you to be in the London office (Holborn) two days per week.
About us
Thredd is the trusted next-gen payments partner for innovators looking to modernise their payments offering. Certified by Mastercard, Visa and Diners & Discover, we process billions of debit, prepaid, and credit transactions annually, supporting consumer and corporate fintechs, digital banks, and embedded finance providers across the globe. Our unique offering is our client‑centric approach, combining hands‑on support with modern, reliable, and scalable technology.
Thredd is privately held by a consortium of strategic growth firms such as Advent International, MissionOG, Temasek, Viking, Visa and Mastercard. Our investors are fully committed to our future which enables us to work with our clients to create a clear vision and give our employees the stability needed with their career.
Our assured solution accelerates the development and delivery of consumer and corporate payments components embedded within digital banks, as well as for expense management, B2B payments, crypto, lending, credit, Buy Now Pay Later, FX, remittance, and open banking innovators.
Since 2007, Thredd has enabled market leaders through our highly reliable, secure, and scalable platform and supported many of our client\'s growth journeys - from early‑stage startup through to globally recognized unicorns, including Monzo, Revolut, and Starling.
Diversity and Inclusion at Thredd
Here at Thredd, we are committed to building a diverse and inclusive workplace where everyone feels valued, respected and empowered. We welcome applications from people of all backgrounds, experiences and identities. If you require any adjustments during the recruitment process, please let us know and we would be happy to support you.
Our Values
Our values‑driven culture is what unites our teams globally and our teams is what drives our success;
- Own it and deliver - Taking responsibility for your own performance and being successful in your own role
- Collaborate purposefully - Building trusted relationships with colleagues, supporting activities and being successful together
- Think differently - Asking questions to check understanding and sharing your ideas to support continuous improvement
- Act courageously - Stepping out of your comfort zone and embracing change to help you learn and grow
