Information Security Lead - ISO27001 & SOC Expert (Hybrid)

Dexory; Verdalsøra; On-site; NOK 1,151,000 - 1,662,000; Full time

Benefits offered by this job

Private healthcare

Life insurance

Income protection

Pension: 4+% employee with 5% employer

Employee Assistance Programme

25 days holiday

Meals onsite

Team events

Job summary

Dexory is seeking an Information Security Lead to own ISO 27001, SOC 1 Type 2, and SOC 2 Type 2 programmes. You’ll respond to customer security due diligence, build scalable security knowledge, and partner with Sales to unblock deals. Hybrid onsite in Wallingford, with 3 days minimum on site.

Experience in GRC/compliance within B2B SaaS or technology is preferred; robotics/startup background a plus. You will contribute to incident response and risk management while advancing Dexory’s information

Qualifications

• Hands-on with ISO 27001 as an implementer or internal auditor; ownership, not just participation.
• Maintains audits-ready controls, evidence, and risk registers in the GRC platform.
• Drives policy, procedures, and controls improvements across the business.
• Manages customer security questionnaires (SIG, CAIQ, VSAQ, bespoke RFP sections).
• Develops a central security knowledge base to speed responses at scale.
• Collaborates with Sales and Customer Success to unblock deals on security gates.

Responsibilities

• Own daily execution of ISO 27001, SOC 1 Type 2, and SOC 2 Type 2 programmes including evidence collection and tester liaison.
• Maintain and update GRC platform with controls, evidence and risk registers.
• Drive continuous policy and control improvements across the business.
• Respond to customer security questionnaires and assist with security RFP sections.
• Build and continually improve a centralised security knowledge base.
• Support security incident response and vulnerability management processes.
• Conduct vendor and third-party security assessments during procurement/onboarding.
• Monitor threat landscape relevant to autonomous robotics and warehouse intelligence.
• Deliver security awareness training and phishing simulations.

Skills

ISO 27001

SOC 1 Type 2

SOC 2 Type 2

GRC

auditor liaison

policy development

risk management

security incident response

vendor assessments

Tools

Thoropass

Vanta

Drata

AWS

Job description

Dexory is seeking an Information Security Lead to own ISO 27001, SOC 1 Type 2, and SOC 2 Type 2 programmes. You’ll respond to customer security due diligence, build scalable security knowledge, and partner with Sales to unblock deals. Hybrid onsite in Wallingford, with 3 days minimum on site.

Experience in GRC/compliance within B2B SaaS or technology is preferred; robotics/startup background a plus. You will contribute to incident response and risk management while advancing Dexory’s information