Security & Compliance Lead

Law firms and legal teams trust Lexroom with sensitive work, and AI has changed the pace of security: vulnerabilities now surface in hours, not months. We are looking for our first Security & Compliance Lead to build our security function from scratch, owning ISO 27001 compliance and turning vulnerability management into a continuous process. You'll report to our engineering leadership and work closely with our IT and Infrastructure teams.

Responsibilities

Build the process to detect, prioritize, and patch vulnerabilities continuously, replacing monthly patch cycles; Own ISO 27001, GDPR, and related security compliance, from policies and controls to documentation and audits; Decide where to implement controls and where to accept and contain risk, and document the trade-offs clearly; Support teams in meeting the security and compliance requirements of customers; Set the foundations of security at Lexroom and spread security habits across engineering

Requirements

5+ years in security compliance or information security, ideally in a tech company of 200-500 people, or in fintech, payments, or banking; Hands-on experience leading ISO 27001 certifications or audits; Solid knowledge of GDPR; Track record of designing or running vulnerability management and patching processes; Comfort making pragmatic risk trade-offs and explaining them clearly to engineering and leadership; Process and ownership: builds processes that last and has their own view on how security should work in a product company; Fluent in English

Nice to have

Italian language skills

Benefits

Hybrid work with office presence in the Milan hub; Comprehensive health insurance; Meal vouchers; Team retreats and off-sites; Meaningful equity in line with the seniority of the role