Security & Compliance Lead

Continuous Vulnerability Management: Build the process to detect, prioritize, and patch vulnerabilities continuously, replacing monthly patch cycles.

Security Compliance: Own ISO 27001, GDPR, and related security compliance, from policies and controls to documentation and audits.

Risk Decisions: Decide where to implement controls and where to accept and contain risk, and document the trade-offs clearly.

Customer Security Requirements: Support our teams in meeting the security and compliance requirements of our customers.

Building the Function: Set the foundations of security at Lexroom and spread security habits across engineering.

Experience: 5+ years in in security compliance or information security, ideally in a tech company of 200-500 people, or in fintech, payments, or banking.

ISO 27001 & Compliance: Hands-on experience leading ISO 27001 certifications or audits, with solid knowledge of GDPR.

Vulnerability Management: A track record of designing or running vulnerability management and patching processes.

Risk Assessment: Comfort making pragmatic risk trade-offs and explaining them clearly to engineering and leadership.

Process & Ownership: You build processes that last, and you bring your own view on how security should work in a product company.

Language: Fluent in English; Italian is a plus.

Hybrid Work: Hybrid with office presence in our Milan hub.

Health Insurance: Comprehensive coverage to ensure peace of mind.

Meal Vouchers: Daily support to make your lunch breaks easier.

Team Retreats & Off-sites: Dedicated time to connect, collaborate, and spark bold ideas.