Information Security Lead

Dexory; East Hagbourne; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Private healthcare

Life insurance

Income protection

Pension

Employee assistance

25 days holiday

Meals onsite

Team events

Job summary

Dexory is seeking an Information Security Lead to own ISO 27001, SOC 1 Type 2, and SOC 2 Type 2 programmes, and to respond to customer security due diligence. You will embed security across engineering, product and operations from our Wallingford offices (3 days on site preferred). Experience in robotics or startup scaleups is a plus.

You will maintain our GRC platform, drive policy improvements, and lead vendor assessments while partnering with Sales and CS to unblock deals with security gates.

Qualifications

• Own ISO 27001, SOC 1 Type 2, and SOC 2 Type 2 programmes, including evidence collection and auditor liaison.
• Maintain GRC platform with current controls, evidence, and risk registers.
• Drive policy, procedure, and control improvements across the business.
• Respond to customer security questionnaires (SIG, CAIQ, VSAQ, RFP sections).
• Build centralised security knowledge base for scalable responses.
• Partner with Sales and CS to unblock deals with security gates.
• Develop and maintain information security policies and risk framework.
• Conduct vendor and third-party security assessments.
• Contribute to incident response and vulnerability management.
• Monitor threat landscape for autonomous robotics/warehouse domain.
• Deliver security awareness training and phishing simulations.
• Experience in information security/GRC/compliance in B2B SaaS.
• ISO 27001 Lead Implementer / internal auditor experience is a plus.
• Familiarity with AWS cloud security principles.

Responsibilities

• Own day-to-day execution of ISO 27001, SOC 1 Type 2, and SOC 2 Type 2 programmes.
• Maintain evidence, controls, and risk registers in the GRC system.
• Respond to customer security questionnaires and audits.
• Develop centralised security knowledge base for scalable responses.
• Lead security awareness training and phishing simulations.
• Collaborate with engineering, product and operations on security.
• Conduct vendor security assessments.
• Support incident response and vulnerability management.

Skills

ISO 27001

SOC 1 Type 2

SOC 2 Type 2

GRC

Information security

AWS security

Vendor assessments

Security questionnaires

Incident response

Threat monitoring

Education

ISO27001 Lead Implementer

CISM

CISA

CISSP

CompTIA Security+

Tools

Thoropass

Vanta

Drata

Job description

Information Security Lead / ISO27001 / SOC / GRC /

Permanent

At Dexory, we are transforming the warehousing and logistics industry through data intelligence.

We're currently recruiting for an Information Security Lead to own and drive our compliance programmes (ISO 27001, SOC 1 Type 2, SOC 2 Type 2), act as the primary responder to customer security due diligence, and build the systems and knowledge base that allow Dexory to scale securely without friction.

You'll work closely with the Head of IT & Security, embedding good security practice across engineering, product, and operations.

Offices based in Wallingford, Oxford and looking for someone who can do 3 days minimum on site ideally more.

Any experience within robotics or start up / scale up environments highly desirable.

Responsibilities / Skills

• Own the day-to-day execution of Dexory's ISO 27001, SOC 1 Type 2, and SOC 2 Type 2 programmes, including evidence collection, control testing, policy maintenance, and auditor liaison
• Maintain our GRC platform - keeping controls, evidence, and risk registers current and audit-ready at all times
• Drive continuous improvement of policies, procedures, and controls across the business
• Serve as the primary point of contact for all inbound customer security questionnaires (SIG, CAIQ, VSAQ, bespoke RFP security sections)
• Build, own, and continuously improve a centralised security knowledge base to enable faster, consistent, and accurate responses at scale
• Partner closely with Sales and Customer Success to unblock deals where security is a gate, providing timely responses and where needed, direct engagement with customer security teams
• Support the development and maintenance of Dexory's information security policies and risk management framework
• Conduct vendor and third-party security assessments as part of the procurement and onboarding process
• Contribute to Dexory's incident response and vulnerability management processes
• Monitor the threat landscape for risks relevant to an autonomous robotics and warehouse intelligence business
• Develop and run security awareness training and phishing simulation programmes across the business
• Experience in an information security, GRC, or compliance role, ideally within a B2B SaaS or technology business
• Hands-on experience with ISO 27001 as an implementer or internal auditor; genuine ownership, not just process participation
• Solid working knowledge of SOC 1 and SOC 2 frameworks (AICPA Trust Services Criteria)
• Familiarity with cloud security principles, particularly AWS
• Nice to Have Certs (ISO 27001 Lead Implementer, CISM, CISA, CISSP, or CompTIA Security+)
• Experience with GRC/compliance platforms such as Thoropass, Vanta, or Drata (nice to have)
• Knowledge of OT, IoT, or robotics security considerations - a genuine differentiator given what we build

Starting from the interview process and continuing into your career with us, you will be working by our four Operating Principles:

• Performance: High standards, outstanding results,
• Commitment: All in, every time
• One team: One mission, shared success

Joining our team and company isn't just about expertise; it's about embracing uncertainty with ambition. We're crafting world-changing solutions, fuelled by a passion to redefine what's possible. We will look for you to help create and shape the future of logistics solutions through our products, our culture and our shared vision.

You will also receive:

• Private healthcare via Bupa with 24/7 medical helpline
• Life insurance
• Income protection
• Pension: 4+% employee with option to opt into salary exchange, 5% employer
• Employee Assistance Programme - mental wellbeing, financial and legal advice/support
• 25 days holiday per year + bank holidays
• Full meals onsite in Wallingford
• Fun team events on and offsite, snacks of all kinds in the office

AAP/EEO Statement

Dexory provides equal employment opportunities to all employees and applicants for employment. It prohibits discrimination and harassment of any type without regard to race, colour, religion, age, sex, national origin, disability status, genetics, protected veteran status, or any other characteristic protected by local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.