InfoSec Lead

The role

The InfoSec Lead will own information security due diligence, compliance, and vendor risk. This person will set the security strategy and roadmap to scale with the business.

What you will do

• Own the InfoSec strategy and roadmap
• Identify control gaps and prioritize remediation
• Run risk identification, assessment and treatment
• Maintain the risk register
• Run vendor security reviews
• Own customer and vendor due diligence (DDQs)
• Drive automation for DDQs
• Maintain compliance with ISO 27001 and SOC2 Type 2
• Manage ISMS reviews, access control reviews, and audit evidence
• Partner with Engineering, Product, and Legal to embed security requirements

Required qualifications

• Significant senior in-house or scale-up InfoSec leadership experience
• Strong understanding of cloud and cloud security
• Track record of scaling due-diligence processes
• AI-literacy with working familiarity with AI governance (ISO 42001, EU AI Act etc)
• Working knowledge of privacy law (GDPR/CCPA/US state privacy laws)

Nice to have

• previous technical background in IT Security or SWE / DevOps

About the company

Orbital is the AI platform for real estate legal work. The company connects the legal and physical record to make real estate transactions faster, clearer, and less manual.