Security & Compliance Architect - ISO 27001 & GDPR

Lexroom.ai; Lombardia; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Equity

Hybrid Milan office

Health insurance

Meal vouchers

Team retreats & off-sites

Job summary

Lexroom in Milan is hiring its first Security & Compliance Lead to own ISO 27001 and drive vulnerability management across the organization. You will work with engineering and IT to turn security into a continuous, well-documented program.

The role requires 5+ years in security/compliance, hands-on ISO 27001 experience, and English fluency; Italian is a plus. The package includes €70,000–€100,000, equity, and hybrid work with a Milan hub.

Qualifications

• 5+ years in security compliance or information security, ideally in tech with 200-500 people, or fintech/banking.
• Hands-on ISO 27001 certifications or audits experience, with solid GDPR knowledge.
• Experience designing or running vulnerability management and patching processes.
• Comfort making pragmatic risk trade-offs and explaining them to engineering/leadership.
• Ability to build enduring security processes in a product company.

Responsibilities

• Continuous Vulnerability Management: build processes to detect, prioritize, and patch vulnerabilities continuously.
• Security Compliance: own ISO 27001, GDPR, and related security compliance, including policies, controls, docs, and audits.
• Risk Decisions: decide where to apply controls and where to accept risk, documenting trade-offs.
• Customer Security Requirements: help teams meet customer security/compliance needs.
• Building the Function: establish the security function foundations and spread security habits across engineering.

Skills

Security expertise

ISO 27001

Vulnerability management

Risk assessment

Process ownership

English fluency

Job description

Lexroom in Milan is hiring its first Security & Compliance Lead to own ISO 27001 and drive vulnerability management across the organization. You will work with engineering and IT to turn security into a continuous, well-documented program.

The role requires 5+ years in security/compliance, hands-on ISO 27001 experience, and English fluency; Italian is a plus. The package includes €70,000–€100,000, equity, and hybrid work with a Milan hub.