Security & Compliance Lead

In breve

The Security & Compliance Lead will guide risk assessments, incident response and GDPR‑aligned policy rollout for Lexroom's Milan office, working closely with product, engineering and legal teams to embed security controls throughout the development lifecycle. This fast‑growing SaaS startup offers the chance to shape its security culture, influence strategic decisions and collaborate in a vibrant, multicultural tech hub. Day‑to‑day duties include coordinating daily risk reviews, leading audit processes, managing third‑party risk and translating technical security concepts for senior stakeholders. The role requires strong familiarity with ISO 27001, NIST and EU data‑privacy rules, as well as practical cloud security experience on AWS or Azure. What the role asks for: - Minimum 5 years information security or compliance experience - Knowledge of ISO 27001 standards - Knowledge of NIST framework - Knowledge of EU data‑privacy regulations - Experience leading security audits - Experience managing third‑party risk - CISSP, CISM or ISO 27001 Lead Implementer certification - Hands‑on AWS or Azure cloud security expertise