Security & Compliance Lead (ISO 27001 / GDPR)

Lexroom Srl; Lombardia; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Hybrid work in Milan

Health insurance

Meal vouchers

Team retreats & off-sites

Job summary

Lexroom is building the AI platform for the legal world. We’re seeking our first Security & Compliance Lead to own ISO 27001 compliance, drive vulnerability management, and align security with product goals. You’ll report to engineering leadership and partner with IT and Infrastructure.

This role requires 5+ years in security/compliance, hands-on ISO27001 and GDPR, and a pragmatic approach to risk. Fluency in English is required; Italian is a plus.

Qualifications

• 5+ years in security compliance or information security in a tech company or fintech/banking.
• Hands-on experience leading ISO 27001 certifications or audits with solid GDPR knowledge.
• Proven vulnerability management and patching processes.
• Ability to make pragmatic risk trade-offs and explain them clearly to engineering and leadership.
• Strong process ownership and ability to implement security in a product company.
• Fluent in English; Italian is a plus.

Responsibilities

• Continuous Vulnerability Management: Build the process to detect, prioritize, and patch vulnerabilities continuously.
• Security Compliance: Own ISO 27001, GDPR, and related security compliance, from policies and controls to documentation and audits.
• Risk Decisions: Decide where to implement controls and where to accept and contain risk, and document the trade-offs clearly.
• Customer Security Requirements: Support our teams in meeting the security and compliance requirements of our customers.
• Building the Function: Set the foundations of security at Lexroom and spread security habits across engineering.

Skills

Vulnerability management

Risk assessment

Compliance leadership

ISO 27001

GDPR knowledge

English fluency

Job description

Lexroom is building the AI platform for the legal world. We’re seeking our first Security & Compliance Lead to own ISO 27001 compliance, drive vulnerability management, and align security with product goals. You’ll report to engineering leadership and partner with IT and Infrastructure.

This role requires 5+ years in security/compliance, hands-on ISO27001 and GDPR, and a pragmatic approach to risk. Fluency in English is required; Italian is a plus.