Information Security Lead

Salary: £90,000 - 90,000 per year

Requirements:

• Experience in an information security, GRC, or compliance role, ideally within a B2B SaaS or technology business
• Hands-on experience with ISO 27001 as an implementer or internal auditor; genuine ownership, not just process participation
• Solid working knowledge of SOC 1 and SOC 2 frameworks (AICPA Trust Services Criteria)
• Familiarity with cloud security principles, particularly AWS
• Experience with GRC/compliance platforms such as Thoropass, Vanta, or Drata is nice to have
• Certification such as ISO 27001 Lead Implementer, CISM, CISA, CISSP, or CompTIA Security is nice to have
• Knowledge of OT, IoT, or robotics security considerations is a strong advantage
• Experience within robotics or a startup/scale-up environment is highly desirable

Responsibilities:

• Own the day-to-day execution of our ISO 27001, SOC 1 Type 2, and SOC 2 Type 2 programmes, including evidence collection, control testing, policy maintenance, and auditor liaison
• Maintain our GRC platform, keeping controls, evidence, and risk registers current and audit-ready at all times
• Drive continuous improvement of our policies, procedures, and controls across the business
• Serve as the primary point of contact for all inbound customer security questionnaires, including SIG, CAIQ, VSAQ, and bespoke RFP security sections
• Build, own, and continuously improve a centralised security knowledge base to enable faster, consistent, and accurate responses at scale
• Partner closely with Sales and Customer Success to unblock deals where security is a gate, providing timely responses and direct engagement with customer security teams where needed
• Support the development and maintenance of our information security policies and risk management framework
• Conduct vendor and third-party security assessments as part of the procurement and onboarding process
• Contribute to our incident response and vulnerability management processes
• Monitor the threat landscape for risks relevant to an autonomous robotics and warehouse intelligence business
• Develop and run security awareness training and phishing simulation programmes across the business

Technologies:

• AWS
• Cloud
• IoT
• Support
• Robotics
• Security

More:

We are Dexory, transforming the warehousing and logistics industry through data intelligence. We are hiring an Information Security Lead to work closely with our Head of IT & Security and help us scale securely without friction. This is a permanent hybrid role based in Wallingford, Oxfordshire, with onsite attendance of around three days per week minimum, ideally more. We value our four operating principles: Performance, Impact, Commitment, and One team. As part of our team, you will help shape the future of logistics solutions through our products, culture, and shared vision. We offer private healthcare via Bupa with a 24/7 medical helpline, life insurance, income protection, a pension contribution structure, an Employee Assistance Programme, 25 days of holiday plus bank holidays, full meals onsite in Wallingford, and fun team events on and offsite, with snacks available in the office.

last updated 34 week of 2026