As Senior Information Security Officer at Definely, you will own the company’s security posture and compliance programs. You’ll lead ISO 27001 and SOC 2 audits, manage risk assessments, and secure AI-driven product features. This pivotal role combines governance with hands-on IT operations to safeguard sensitive data for world-leading legal enterprises.
Senior Information Security Officer at Definely
In this hybrid role, you’ll take full ownership of security governance, lead ISO/SOC 2 certifications, and safeguard AI-powered contract tools used by the world's top law firms. With a competitive salary up to £85k, equity, and a performance bonus, this is a rare chance to shape the security posture of a company trusted by global brands like Samsung and IKEA. Join a team founded by elite lawyers to redefine how the legal industry operates.
About this role
Role overview
About the company
Definely is an AI-powered LegalTech company that provides a suite of tools to help corporate and private practice lawyers draft, review, and manage complex contracts more efficiently, primarily within Microsoft Word. Its products streamline the creation, editing, and quality-checking of legal documents by keeping lawyers in their natural workflow while enabling fast navigation across definitions, references, and clauses. Originally designed to make legal documents more accessible for visually impaired professionals, Definely has evolved into a broader drafting, reviewing, and knowledge platform used by in-house legal teams and law firms globally. The product suite includes features such as contextual editing, clause insertion and reuse via a knowledge repository (Vault), and AI-assisted drafting and review (Enhance and Draft). Definely aims to reduce review time, standardize document quality, mitigate legal and operational risk, and simplify how legal teams understand and work with complex information. The company is a fast-growing, Series B–stage scale-up headquartered in the UK and focuses on transforming the global legal services market through AI-driven document workflows.
What you'll do
What you will do
- Own and evolve Definely’s Information Security Management System (ISMS), leading readiness for ISO 27001, SOC 2 Type II, and ISO/IEC 42001 certifications.
- Embed secure SDLC practices and perform threat modelling for AI/LLM-enabled products, working closely with engineering to safeguard product design.
- Manage day-to-day IT operations, including device management and onboarding, while leading company-wide incident response plans and vendor security reviews.
Who you are
Who this is a fit for
- Proven experience managing ISO 27001 and SOC 2 certifications within a SaaS or product-led environment, ideally using compliance automation tools like Drata.
- Technical expertise in cloud security (Azure or AWS), identity management (SSO/IAM), and securing AI-based systems.
- Strong background in both security governance and hands-on IT support, with relevant certifications such as CISSP, CISM, or ISO 27001 Lead Auditor.
Why this role
Why this role is remarkable
- Shape the security strategy for a high-growth LegalTech company recently backed by a Series B funding round from Microsoft, Google, and Octopus Ventures.
- Impact global legal giants like Samsung and IKEA by ensuring the security of AI-driven tools used for critical contract negotiations.
- Enjoy a high-impact, hybrid role that blends strategic governance with tactical IT operations, offering direct influence over the company's scaling security infrastructure.
Jack & Jill
How Jack & Jill work together
Meet Jack
Jack gets to know what you're great at and what you want next, then searches 15 million jobs daily and helps you discover roles at companies like this.
How does this work?
Jack’s an AI agent for job searching and career coaching. He works for you.
Jill is the AI recruiter working for the company. She recruits from Jack’s network.
If it’s a match and the company wants to meet you, they’ll make the intro. In the meantime, if you’d like, Jack will send you excellent alternatives.