Security Architect & GRC Lead for AI-Powered SaaS

lawvu-careers; New Zealand; Hybrid; NZD 180,000 - 240,000; Full time

Benefits offered by this job

Wellness allowance

Health insurance

Extended parental leave

Birthday off

Share options

Home office allowance

Job summary

LawVu, based in New Zealand, seeks a Security Architect & GRC Lead to own the security strategy and roadmap for the LawVu Platform. You will partner with Engineering, Product, and the Legal team to embed security into the product lifecycle and governance framework.

The role focuses on ISO 27001 and SOC 2 compliance, AI security, data protection, and third-party risk, driving risk-based decisions that protect customers and the business.

Qualifications

• Proven experience leading information security and/or security architecture in a global SaaS environment.
• Strong track record with ISO 27001 and SOC 2

Responsibilities

• Own the information security strategy, standards, and roadmap.
• Provide security architecture oversight and governance across Engineering and Product.
• Own security governance: policies, standards, and risk management framework.
• Own the continuous maturity of security compliance (ISO27001, SOC 2 Type II).
• Define control framework and audit strategy; manage auditor relationships.
• Support AI security & safety, including AI risk assessments.
• Set third-party security risk, incident response, and business continuity approach.
• Lead customer trust programs and security communications.

Skills

Security architecture

ISO 27001

SOC 2

Cloud security

AI security

GRC governance

Risk management

Security reviews

Tools

Azure

AWS

GCP

Job description

LawVu, based in New Zealand, seeks a Security Architect & GRC Lead to own the security strategy and roadmap for the LawVu Platform. You will partner with Engineering, Product, and the Legal team to embed security into the product lifecycle and governance framework.

The role focuses on ISO 27001 and SOC 2 compliance, AI security, data protection, and third-party risk, driving risk-based decisions that protect customers and the business.