InfoSec Lead

present of AI; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

Orbital, an AI software company for legal diligence, seeks an Information Security leader to own end-to-end security for a fast-growing platform. You will shape the security roadmap, manage the risk register, and oversee vendor and customer due diligence work, ensuring ISO 27001 and SOC 2 Type 2 certifications stay current.

The role requires collaboration with engineers and product teams to automate repetitive diligence tasks and drive credible risk decisions in an evolving AI environment.

Qualifications

• Experience leading information security in-house at a scale-up.
• Strong knowledge of ISO 27001 and SOC 2 Type 2.
• Familiarity with AI governance frameworks and cloud security.

Responsibilities

• Own information security end-to-end for a fast-growing AI legal platform.
• Define and maintain the security roadmap and risk register.
• Oversee vendor reviews and customer due diligence questionnaires.
• Ensure ISO 27001 and SOC 2 Type 2 certifications run continuously.
• Translate manual diligence into templated or automated processes.

Skills

InfoSec leadership

Security governance

Cloud security

Engineer collaboration

Automation of diligence

Job description

This role owns information security end to end inside a fast growing AI legal platform. It covers the security roadmap, risk register, vendor reviews, customer due diligence questionnaires, and keeping ISO 27001 and SOC 2 Type 2 certifications running continuously. A strong candidate has led these areas in house at a scale up, understands cloud security, can talk credibly with engineers, and turns repeated manual diligence work into templated or automated processes.

How it fits the AI era

The company sells AI software for legal work, so security questions from law firm clients will keep coming and will keep changing as the product does. Much of the diligence and evidence gathering can be automated, which frees time for judgment about real risk and for keeping public security information accurate. What stays human is deciding what risk is acceptable, weighing in on security sensitive product changes, and handling sensitive client conversations.

How it builds AI experience

The posting asks for AI literacy and familiarity with AI governance frameworks such as ISO 42001 and the EU AI Act. That experience would be built by applying those frameworks to a product that automates legal diligence and lease analysis, and by learning how client diligence questions shift when AI is part of the service. Working alongside engineering and product on AI related controls would deepen it further.

Worth showing

• In house InfoSec leadership
• ISO 27001 and SOC 2
• Vendor and customer DDQs
• Cloud security understanding
• AI governance familiarity

This is our own read, written from the employer's posting and the company's Spotlight. The employer's posting is the source of truth for the role.

About Orbital

Orbital develops artificial intelligence software that automates commercial real estate legal diligence, lease analysis, and property boundary visualization.