InfoSec Lead in London

Orbital is the AI platform for real estate legal work. Real estate shapes the world around us: our homes, our workplaces and our cultural landmarks. It’s the infrastructure that powers everyday life and is the world's largest asset class. Yet behind every single deal, real estate and legal teams work hard to navigate decades-old complexity; manually connecting documents, hidden obligations, geo-spatial context, and multiple parties into a path forward. We connect the legal and physical record, so that path is clearer than ever before. Our mission is to make real estate transactions faster, clearer, and less manual.

A bit about us: We’re building at the forefront of AI technology, without losing the deeply human expertise our clients depend on. Orbital is built with former practising real estate lawyers and 250+ years of combined legal expertise. We're purpose-built for the complexity of real estate: accelerating due diligence, drafting and negotiation, and deal coordination with legal-grade precision. We've just raised a $60m Series B, led by Brighton Park Capital, to accelerate our global expansion – $75m raised to date. We're trusted by 5,000+ real estate professionals, spanning UK Magic Circle and US Am Law 100 firms, to household names like M&S. Leading firms like BCLP, Orrick, Goodwin, Womble Bond Dickinson and Clifford Chance rely on Orbital to remove the busywork, freeing legal and real estate teams to focus on sharp judgment, standout client service, and closing deals faster.

Working at Orbital means joining a bold, ambitious team, with the trust to take ownership and make a real impact from day one.

The Role: Orbital has been scaling fast, and we’re scaling our security and compliance with it. We're hiring a senior, London-based InfoSec Lead to own our information security due diligence, compliance, and vendor risk end-to-end - bringing structure and consistency to work that's currently covered on a contractor basis. Now is the time to bring this function in-house, focusing on automating manual tasks (such as customer DDQs), enhancing our compliance stance, and ultimately securing the Infosec function as a proactive enabler of our growth. This is a full-time InfoSec role, working alongside our IT Manager. Whilst experience in IT operations or IT management is helpful, the Infosec Lead and IT Manager report independently to our Head of Operations and own separate (but naturally interconnected) remits. You’ll also work closely with Engineering, Product, Legal and our external Infosec support, to keep security and compliance embedded in how the business runs, not bolted on after the fact.

What You’ll Own:

• InfoSec & Compliance Delivery: Own our InfoSec strategy and roadmap; set the direction for how security and compliance scale with the business, identify control gaps and weaknesses, prioritize remediation, and track it through to completion.
• Own our risk program: run risk identification, assessment and treatment, keep the risk register current.
• Own third party risk assurance: run vendor security reviews for vendors we bring on and own customer & vendor due diligence (DDQs).
• Drive automation on the DDQ side specifically.
• Own our existing and future compliance certifications: maintain compliance with existing standards (ISO 27001 and SOC2 Type 2) and pursue future certifications relevant to us.
• Partner cross-functionally: work with Engineering, Product, and Legal to embed security and compliance requirements.

What We're Looking For:

• Significant senior in-house or scale-up InfoSec leadership experience.
• Strong understanding of cloud & cloud security.
• A track record of scaling due-diligence processes.
• Comfortable being close to engineering.
• Pragmatic and delivery-focused.
• AI-literacy with working familiarity with AI governance.
• Comfortable operating independently.
• Working knowledge of privacy law is important.

Why This Might Not Be For You:

• You want to run day-to-day IT operations or manage IT staff.
• You prefer tasks defined and handed to you.
• You feel more comfortable with a narrowly-defined, audit-only remit.

Why Join Orbital:

• Shape how security and compliance scale with the business.
• Genuine cross-functional influence.
• Genuine momentum: $60m Series B, doubling headcount, expanding across two continents.
• Work alongside a leadership team that treats security as a business enabler.

Security is everyone’s responsibility at Orbital. We ask all team members to follow our security policies, complete regular awareness training, and handle sensitive data with care in line with ISO 27001 standards. Spot something unusual? Reporting risks or incidents quickly helps us maintain the strong culture of security and compliance we all depend on.

At Orbital, we’re committed to building a diverse and inclusive team. We especially welcome applications from people who are traditionally underrepresented in tech. Even if you don’t meet every single requirement, or if the right role isn’t listed yet, we’d still love to hear from you.

This hiring range is a reasonable estimate of the base pay range for this position at the time of posting. Pay is based on several factors, which may include job‑related knowledge, skills, experience, and business requirements. Everyone who works with Orbital goes through background screening before they start.