InfoSec Lead

The role

The InfoSec Lead will own information security due diligence, compliance, and vendor risk end-to-end. This person will set the security strategy and roadmap, automate manual tasks, and maintain compliance certifications.

What you will do

• Own the InfoSec strategy and roadmap
• Identify control gaps and prioritize remediation
• Run risk identification, assessment, and treatment
• Run vendor security reviews and own customer and vendor due diligence
• Drive automation for the DDQ side
• Maintain compliance with ISO 27001 and SOC2 Type 2
• Manage ISMS reviews, access control reviews, and audit evidence gathering
• Keep policy and public-facing security documentation current
• Partner with Engineering, Product, and Legal to embed security requirements

Required qualifications

• Significant senior in-house or scale-up InfoSec leadership experience
• Strong understanding of cloud and cloud security
• Track record of scaling due-diligence processes
• AI-literacy with working familiarity with AI governance (ISO 42001, EU AI Act etc)
• Working knowledge of privacy law (GDPR/CCPA/US state privacy laws)

Nice to have

• Previous technical background in IT Security or SWE / DevOps

Before you apply

• Everyone who works with Orbital goes through background screening before they start

About the company

Orbital is the AI platform for real estate legal work. The company connects the legal and physical record to make real estate transactions faster, clearer, and less manual.