Senior InfoSec Lead — Compliance & Vendor Risk

orbital; Greater London; On-site; GBP 120,000 - 170,000; Full time

Job summary

Orbital is seeking a senior London-based InfoSec Lead to own information security due diligence, compliance, and vendor risk end-to-end. You will focus on automating DDQs, strengthening our compliance posture, and securing the Infosec function to enable growth.

This is a full-time role reporting alongside our IT Manager. You'll work with Engineering, Product and Legal to ensure security is embedded in how we build and sell, not bolted on later, and you will manage external Infosec support while

Qualifications

• Senior in-house or scale-up InfoSec leadership experience.
• Experience owning due diligence, vendor review and compliance end-to-end.
• Strong understanding of cloud security and IT security fundamentals.

Responsibilities

• Own InfoSec strategy and roadmap, scaling security with the business.
• Run risk identification, assessment and remediation; maintain risk register.
• Lead third-party risk assurance and DDQs for customers and vendors.
• Automate DDQs and manage certification programs (ISO 27001, SOC 2 Type 2).
• Collaborate with Engineering, Product and Legal to embed security requirements.

Skills

InfoSec leadership

Vendor risk management

Cloud security

Risk assessment

Tools

ISO 27001

SOC 2

ISMS

Job description

Orbital is seeking a senior London-based InfoSec Lead to own information security due diligence, compliance, and vendor risk end-to-end. You will focus on automating DDQs, strengthening our compliance posture, and securing the Infosec function to enable growth.

This is a full-time role reporting alongside our IT Manager. You'll work with Engineering, Product and Legal to ensure security is embedded in how we build and sell, not bolted on later, and you will manage external Infosec support while