About us Lucanet is the CFO Solution Platform built for modern finance tax teams, offering an integrated suite of solutions to simplify and automate their most critical finance processes. More than 6,000 companies around the world rely on our easy-to-use, out-of-the-box SaaS platform - from consolidation and financial planning to tax compliance and reporting, ESG reporting, banking and cash management, and more. PE-backed and growing our footprint across global markets.

Behind the platform is a global team of 850+ people who care about doing the work well. We challenge each other to push boundaries, move fast without cutting corners, and build solutions that genuinely change how finance tax leaders operate. If you're looking for a place where your work has real reach - and where your growth is part of the deal - this is it.

Discover more about Lucanet as an employer. The Role This is a new role created because commercial success is driving more security scrutiny than ever, more enterprise deals, more due diligence, more regulatory expectations. We’ve invested heavily in automation (including agentic AI tooling that handles the bulk of RFP responses), we run mature ISO 27001 and SOC 2 programmes, and we’re already underway with ISO 42001 for AI governance.

None of this is broken, it needs to go further. What we need is someone who can handle the last mile: the nuanced security questions that can’t be answered by automation alone, the edge cases that require judgement, the conversations with customers and auditors where clarity and credibility matter. Someone who takes what’s already working and makes it sharper, broader, and more scalable.

This role sits within the Information Security function and works across engineering, SRE, product, and go-to-market teams. You won’t just maintain what exists - you’ll push it forward. Lucanet has always operated proactively on security.

What’s changed is the landscape: the volume of enterprise deals driving security scrutiny, the regulatory environment accelerating under NIS2 and the EU AI Act, and the pace of AI innovation inside our own product. Scaling compliance-as-engineering to match that pace requires more hands on deck — sharp ones.

Requirements

feed into the product roadmap You’ll have access to best-in-class AI tools — Claude, OpenAI, and Gemini — to augment your own work and push the boundaries of what security operations can look like You’ll work in a team that treats experimentation as a feature, not a risk

What You'Ll Do

Security assurance ISMS governance. You’ll own the continuous improvement of Lucanet’s control environment — maintaining and maturing the ISMS, strengthening ISO 27001 and SOC 2 processes, and ensuring audit-readiness remains a permanent state rather than a periodic effort. The foundations are solid; your job is to raise the bar.

Customer trust — the last mile. Our agentic RFP tooling handles the bulk of security questionnaire responses at scale. You own what comes after: the complex follow-up questions that need human judgement, the assurance calls where a customer needs to hear a credible voice, and the edge-case scenarios where a templated answer isn’t enough.

You’ll also refine the knowledge base that feeds the automation, making each cycle smarter than the last. Compliance-as-code — beyond CI/CD.

Senior Information Security Analyst