Security & Compliance Lead

Lexroom http://Lexroom.ai is building the AI platform where legal work gets done. In just over two years, we've grown from zero to €25M ARR, and today more than 20,000 legal professionals across Italy, Spain, Germany, France, and Bulgaria rely on Lexroom http://Lexroom.ai. We're backed by $73M from Left Lane Capital, Base10 Partners, and Eurazeo, and we're a team of around 300 builders who move fast, say things straight, and own each outcome. Our next goal? Become Europe's most-used legal product. WHY LEXROOM http://Lexroom.ai?

• Shape the Standard: Be part of the team setting the benchmark for legal AI in Europe.
• Work with the Best: Collaborate with exceptional colleagues in a culture that values competence, curiosity, and ambition.
• Deliver Meaningful Results: Your contribution will directly influence how legal professionals work—faster, clearer, and more efficiently. At Lexroom http://Lexroom.ai, we leave buzzwords behind. Here, you’ll build something that lasts: a trusted platform, a strong reputation, a new standard for the legal world. Role Law firms and legal teams trust Lexroom with sensitive work, and AI has changed the pace of security: vulnerabilities now surface in hours, not months. We are looking for our first Security & Compliance Lead to build our security function from scratch, owning ISO 27001 compliance and turning vulnerability management into a continuous process. You’ll report to our engineering leadership and work closely with our IT and Infrastructure teams. Your key responsibilities
• Continuous Vulnerability Management: Build the process to detect, prioritize, and patch vulnerabilities continuously, replacing monthly patch cycles.
• Security Compliance: Own ISO 27001, GDPR, and related security compliance, from policies and controls to documentation and audits.
• Risk Decisions: Decide where to implement controls and where to accept and contain risk, and document the trade-offs clearly.
• Customer Security Requirements: Support our teams in meeting the security and compliance requirements of our customers.
• Building the Function: Set the foundations of security at Lexroom and spread security habits across engineering. What we’re looking for
• Experience: 5+ years in in security compliance or information security, ideally in a tech company of 200-500 people, or in fintech, payments, or banking.
• ISO 27001 & Compliance: Hands-on experience leading ISO 27001 certifications or audits, with solid knowledge of GDPR.
• Vulnerability Management: A track record of designing or running vulnerability management and patching processes.
• Risk Assessment: Comfort making pragmatic risk trade-offs and explaining them clearly to engineering and leadership.
• Process & Ownership: You build processes that last, and you bring your own view on how security should work in a product company.
• Language: Fluent in English; Italian is a plus. Rewarding your contribution
• Compensation: €70,000–100,000
• Equity: meaningful equity on top, in line with the seniority of the role
• Team retreats & off-sites: dedicated time to connect, collaborate, and spark bold ideas Benefits That Matter
• Hybrid Work: Hybrid with office presence in our Milan hub.
• Health Insurance: Comprehensive coverage to ensure peace of mind.
• Meal Vouchers: Daily support to make your lunch breaks easier.
• Team Retreats & Off-sites: Dedicated time to connect, collaborate, and spark bold ideas. At Lexroom http://Lexroom.ai, ambition meets discipline and purpose. We're not just building a product—we're setting a new standard for the legal world. If you're ready to contribute to something lasting and meaningful, we'd love to hear from you.