Security & Compliance Lead

Lexroom is building the AI platform where legal work gets done. In just over two years, we've grown from zero to €25M ARR, and today more than 20,000 legal professionals across Italy, Spain, Germany, France, and Bulgaria rely on Lexroom.
We're backed by $73M from Left Lane Capital, Base10 Partners, and Eurazeo, and we're a team of around 300 builders who move fast, say things straight, and own each outcome.
Our next goal? Become Europe's most-used legal product.

• Shape the Standard: Be part of the team setting the benchmark for legal AI in Europe.

• Work with the Best: Collaborate with exceptional colleagues in a culture that values competence, curiosity, and ambition.

• Deliver Meaningful Results: Your contribution will directly influence how legal professionals work—faster, clearer, and more efficiently.

At Lexroom, we leave buzzwords behind. Here, you’ll build something that lasts: a trusted platform, a strong reputation, a new standard for the legal world.
Role

Law firms and legal teams trust Lexroom with sensitive work, and AI has changed the pace of security: vulnerabilities now surface in hours, not months. We are looking for our first Security & Compliance Lead to build and lead Lexroom’s security program, embedding security into our engineering practices while ensuring effective risk management and regulatory compliance. For us, security comes first and compliance is an outcome: the priority is reducing real risk, not collecting certifications. You’ll report to our engineering leadership and work closely with our Engineering, IT and Infrastructure teams, with the opportunity to grow into a CISO role as the function scales.

Your key responsibilities

• Building the Function: Set the foundations of a lean, effective security function at Lexroom, integrated with Engineering, and spread security habits across the team.

• Application & Cloud Security: Partner with Engineering to establish security practices across application development, cloud infrastructure, IAM, CI/CD, and data protection.

• Security Architecture & Risk: Identify and assess architectural risks, drive threat modeling, and oversee remediation.

• Continuous Vulnerability Management: Build the process to detect, prioritize, and patch vulnerabilities continuously, replacing monthly patch cycles.

• Incident Response: Establish incident detection, escalation, and response processes.

• AI Security: Assess security risks specific to LLM-based applications, including prompt injection, sensitive data exposure, and tenant isolation.

• Risk Decisions: Drive risk assessments, recommend mitigations, and establish clear risk ownership and acceptance processes.

• Security Compliance: Own ISO 27001, GDPR, and related security compliance, from policies and controls to documentation and audits.

• Customer Security Requirements: Support our teams in meeting the security and compliance requirements of our customers.

What we’re looking for

• Experience: 5+ years in information security, with hands-on experience in security engineering, cloud security, or application security, and exposure to governance and compliance.

• Building Security Programs: Experience building or scaling security programs in high-growth SaaS or cloud-native product companies.

• Technical Depth: Solid understanding of modern cloud architectures, secure software development practices, and vulnerability management.

• ISO 27001 & Compliance: Experience with ISO 27001 certifications or audits, and solid knowledge of GDPR.

• AI Security: Familiarity with the security risks of LLM-based applications is a strong plus.

• Pragmatism & Influence: You make pragmatic risk trade-offs, prioritize what matters, and influence engineering teams without relying on formal authority.

• Ownership: You build processes that last, and you bring your own view on how security should work in a product company.

• Language: Fluent in English; Italian is a plus.

Rewarding your contribution

• Compensation: €70,000–100,000

• Equity: Meaningful equity on top, in line with the seniority of the role

Benefits that matter

• Hybrid Work: Hybrid with office presence in our Milan hub.

• Health Insurance: Comprehensive coverage to ensure peace of mind.

• Meal Vouchers: Daily support to make your lunch breaks easier.

• Team Retreats & Off-sites: Dedicated time to connect, collaborate, and spark bold ideas.

At Lexroom, ambition meets discipline and purpose.
We’re not just building a product—we’re setting a new standard for the legal world. If you’re ready to contribute to something lasting and meaningful, we’d love to hear from you.