Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this InfoSec Lead role.
Rezi rewrites your resume against Orbital's job description. Free.
Tailor your resume to this InfoSec Lead role.
Rezi rewrites your resume against Orbital's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the InfoSec Lead posting at Orbital — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the InfoSec Lead posting at Orbital — free, in seconds.
About the Role
Orbital is seeking a senior, NYC-based InfoSec Lead to own information security due diligence, compliance, and vendor risk. This role will bring structure and consistency to these functions, automate manual tasks, enhance compliance, and secure the InfoSec function as a proactive growth enabler. You will work closely with Engineering, Product, and Legal to embed security and compliance into business operations.
Responsibilities
- Own the InfoSec strategy and roadmap, setting direction for security and compliance scaling.
- Identify control gaps and weaknesses, prioritize remediation, and track completion.
- Own the risk program, including identification, assessment, treatment, and maintaining the risk register.
- Own third-party risk assurance, conducting vendor security reviews and managing customer/vendor due diligence (DDQs).
- Drive automation for DDQ processes.
- Own existing and future compliance certifications (ISO 27001, SOC2 Type 2), including ISMS management, access control reviews, audit evidence gathering, and remediation tracking.
- Maintain policy and public-facing security documentation.
- Partner with Engineering, Product, and Legal to embed security and compliance requirements into product development and sales processes.
- Ensure customer-facing security information is accurate by staying close to product changes.
Requirements
- Significant senior in-house or scale-up InfoSec leadership experience, owning due diligence, vendor review, and compliance end-to-end in a fast-moving business.
- Strong understanding of cloud and cloud security.
- Previous technical background in IT Security or SWE/DevOps is ideal.
- Track record of scaling due-diligence processes through templating, automation, or self-service.
- Comfortable participating in technical conversations with engineering and understanding product changes.
- Pragmatic and delivery-focused, able to distinguish genuine risks from distractions.
- AI-literacy with working familiarity with AI governance (ISO 42001, EU AI Act etc.).
- Comfortable operating independently as an individual contributor.
- Working knowledge of privacy law (GDPR/CCPA/US state privacy laws).
Skills
- Information Security
- Compliance
- Vendor Risk Management
- Due Diligence
- Risk Management
- ISO 27001
- SOC2 Type 2
- Cloud Security
- AI Governance
- GDPR
- CCPA
- Automation
Location
- New York City
- US
Work Type
- Full-time
- Hybrid
Experience Level
- Senior
About the Company
- Orbital is an AI platform for real estate legal work, aiming to make transactions faster, clearer, and less manual.
- The company is building at the forefront of AI technology, combining it with deep legal expertise.
- Orbital is built with former practicing real estate lawyers and over 250 years of combined legal expertise.
- The company has raised $75m to date, including a recent $60m Series B led by Brighton Park Capital.
- Orbital is trusted by over 5,000 real estate professionals and leading firms.
- Working at Orbital means joining a bold, ambitious team with the trust to take ownership and make an impact.
Equal Opportunity
- Orbital is committed to building a diverse and inclusive team and especially welcomes applications from people who are traditionally underrepresented in tech.
- Security is everyone’s responsibility at Orbital, requiring adherence to security policies, regular awareness training, and careful handling of sensitive data.
- Background screening is conducted for all employees to maintain security.