Security & Compliance Lead

Lexroom.ai; Lombardia; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Equity

Hybrid Milan office

Health insurance

Meal vouchers

Team retreats & off-sites

Job summary

Lexroom in Milan is hiring its first Security & Compliance Lead to own ISO 27001 and drive vulnerability management across the organization. You will work with engineering and IT to turn security into a continuous, well-documented program.

The role requires 5+ years in security/compliance, hands-on ISO 27001 experience, and English fluency; Italian is a plus. The package includes €70,000–€100,000, equity, and hybrid work with a Milan hub.

Qualifications

• 5+ years in security compliance or information security, ideally in tech with 200-500 people, or fintech/banking.
• Hands-on ISO 27001 certifications or audits experience, with solid GDPR knowledge.
• Experience designing or running vulnerability management and patching processes.
• Comfort making pragmatic risk trade-offs and explaining them to engineering/leadership.
• Ability to build enduring security processes in a product company.

Responsibilities

• Continuous Vulnerability Management: build processes to detect, prioritize, and patch vulnerabilities continuously.
• Security Compliance: own ISO 27001, GDPR, and related security compliance, including policies, controls, docs, and audits.
• Risk Decisions: decide where to apply controls and where to accept risk, documenting trade-offs.
• Customer Security Requirements: help teams meet customer security/compliance needs.
• Building the Function: establish the security function foundations and spread security habits across engineering.

Skills

Security expertise

ISO 27001

Vulnerability management

Risk assessment

Process ownership

English fluency

Job description

Lexroomis building the AI platform where legal work gets done. In just over two years, we've grown from zero to €25M ARR, and today more than 20,000 legal professionals across Italy, Spain, Germany, France, and Bulgaria rely on Lexroom. We're backed by $73M from Left Lane Capital, Base10 Partners, and Eurazeo, and we're a team of around 300 builders who move fast, say things straight, and own each outcome. Our next goal? Become Europe's most-used legal product.

Why Lexroom?

• Shape the Standard: Be part of the team setting the benchmark for legal AI in Europe.

• Work with the Best: Collaborate with exceptional colleagues in a culture that values competence, curiosity, and ambition.

• Deliver Meaningful Results: Your contribution will directly influence how legal professionals work—faster, clearer, and more efficiently.

At Lexroom, we leave buzzwords behind. Here, you’ll build something that lasts: a trusted platform, a strong reputation, a new standard for the legal world.

Role

Law firms and legal teams trust Lexroom with sensitive work, and AI has changed the pace of security: vulnerabilities now surface in hours, not months. We are looking for our first Security & Compliance Lead to build our security function from scratch, owning ISO 27001 compliance and turning vulnerability management into a continuous process. You’ll report to our engineering leadership and work closely with our IT and Infrastructure teams.

Your key responsibilities

• Continuous Vulnerability Management: Build the process to detect, prioritize, and patch vulnerabilities continuously, replacing monthly patch cycles.

• Security Compliance: Own ISO 27001, GDPR, and related security compliance, from policies and controls to documentation and audits.

• Risk Decisions: Decide where to implement controls and where to accept and contain risk, and document the trade-offs clearly.

• Customer Security Requirements: Support our teams in meeting the security and compliance requirements of our customers.

• Building the Function: Set the foundations of security at Lexroom and spread security habits across engineering.

What we’re looking for

• Experience: 5+ years in security compliance or information security, ideally in a tech company of 200-500 people, or in fintech, payments, or banking.

• ISO 27001 & Compliance: Hands-on experience leading ISO 27001 certifications or audits, with solid knowledge of GDPR.

• Vulnerability Management: A track record of designing or running vulnerability management and patching processes.

• Risk Assessment: Comfort making pragmatic risk trade-offs and explaining them clearly to engineering and leadership.

• Process & Ownership: You build processes that last, and you bring your own view on how security should work in a product company.

• Language: Fluent in English; Italian is a plus.

Rewarding your contribution

• Compensation: €70,000–100,000

• Equity: meaningful equity on top, in line with the seniority of the role

• Team retreats & off-sites: dedicated time to connect, collaborate, and spark bold ideas

Benefits That Matter

• Hybrid Work: Hybrid with office presence in our Milan hub.

• Health Insurance: Comprehensive coverage to ensure peace of mind.

• Meal Vouchers: Daily support to make your lunch breaks easier.

• Team Retreats & Off-sites: Dedicated time to connect, collaborate, and spark bold ideas.

At Lexroom, ambition meets discipline and purpose.

We're not just building a product—we're setting a new standard for the legal world. If you're ready to contribute to something lasting and meaningful, we'd love to hear from you.