IT Security & Compliance Lead

I.T Security, Privacy & AI Governance Lead

Edinburgh

Wordsmith

Wordsmith is building the AI-enabled command centre for in-house legal teams.

Our customers are some of the most demanding enterprise legal departments in the world, and they hold us to a high bar on how we secure our systems, devices, and infrastructure.

We're looking for someone to build the IT security function that keeps that trust intact as we scale.

The Role

Security, Privacy & AI Governance Leads make sure Wordsmith's systems, devices, and infrastructure stay secure as the company grows.

You'll build our IT security function from the ground up — covering device management, identity and access, infrastructure controls, and incident response — while also owning the compliance and AI governance work that keeps enterprise customers confident in how we operate.

It's a hands-on, build-it-yourself role. You'll choose the tooling, set the controls, and make sure security is baked into how the company operates day to day, not bolted on afterwards.

What You'll Do

IT Security & Device Management

- Own device compliance and mobile device management (MDM) across the company, using tools like Jamf or Intune to keep endpoints secure and compliant.

- Manage identity and access management (IAM) — provisioning, access reviews, and least-privilege controls — using tools like Okta.

- Own infrastructure and cloud security controls across our environment (e.g. AWS), working closely with Engineering to keep systems hardened.

Security Operations & Incident Response

- Lead security incident response — full lifecycle investigations, coordinating with internal teams and external partners (e.g. SOCaaS providers), and running post-incident reviews and tabletop exercises.

- Operate and tune security monitoring and detection tooling (EDR, DLP, SIEM, or similar) to catch and respond to threats quickly.

Compliance & Certification

- Own SOC 2 Type II and ISO 27001/27017/27018 end-to-end, from policy des...