Security & Compliance Lead: ISO 27001 & Risk Champion

US Health Partners, LLC; Lombardia; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Hybrid work

Health Insurance

Meal vouchers

Team retreats

Job summary

Lexroom, the AI platform for legal work, seeks its first Security & Compliance Lead to own ISO 27001 compliance and build vulnerability management from scratch. You will collaborate with engineering, IT, and infrastructure to shape security in a growing product company.

We value practical risk decisions, ownership, and the ability to influence security policy across teams, with English fluency and Italian as a plus. This is a hybrid role based in Milan.

Qualifications

• 5+ years in security compliance or information security, ideally in a tech company of 200-500 people, or in fintech, payments, or banking.
• Hands-on experience leading ISO 27001 certifications or audits, with solid knowledge of GDPR.
• A track record of designing or running vulnerability management and patching processes.
• Comfort making pragmatic risk trade-offs and explaining them clearly to engineering and leadership.
• You build processes that last, and you bring your own view on security in a product company.
• Fluent in English; Italian is a plus.

Responsibilities

• Continuous Vulnerability Management: Build the process to detect, prioritize, and patch vulnerabilities continuously, replacing monthly patch cycles.
• Security Compliance: Own ISO 27001, GDPR, and related security compliance, from policies and controls to documentation and audits.
• Risk Decisions: Decide where to implement controls and where to accept and contain risk, and document the trade-offs clearly.
• Customer Security Requirements: Support our teams in meeting the security and compliance requirements of our customers.
• Building the Function: Set the foundations of security at Lexroom and spread security habits across engineering.

Skills

Experience in security compliance

ISO 27001 & Compliance

Vulnerability management

Risk assessment

Process ownership

English fluency

Job description

Lexroom, the AI platform for legal work, seeks its first Security & Compliance Lead to own ISO 27001 compliance and build vulnerability management from scratch. You will collaborate with engineering, IT, and infrastructure to shape security in a growing product company.

We value practical risk decisions, ownership, and the ability to influence security policy across teams, with English fluency and Italian as a plus. This is a hybrid role based in Milan.