Head of Information Security

About The Role This is a hands-on role with real ownership. You will take responsibility for QuantumLight's perimeter security function, working across technology, processes and people to identify risks and put the right controls in place. From securing our systems and infrastructure to developing policies and supporting audits and regulatory requirements, you will play a key role in building a strong security foundation. Responsibilities

• Own and enforce security policies, controls and procedures
• Manage access, identity, devices and endpoint security
• Monitor security risks, alerts and permissions across our systems
• Ensure security of our infrastructure, cloud environment and internal tools
• Manage GDPR, ISO, security questionnaires, audits and certification processes
• Conduct security risk assessments and coordinate external penetration testing
• Work closely with Legal, IT and the wider team to continuously improve our security posture Requirements
• Experience in information security, security engineering, security operations or a similar role
• Strong understanding of networks, infrastructure, cloud and identity/access management
• Hands-on experience implementing and enforcing security controls
• Comfortable owning security in a small, fast-moving company
• Strong risk assessment and problem-solving skills
• Good understanding of GDPR/ISO and security compliance
• You don't need to be a software engineer or penetration tester, but you should be technically strong enough to understand how our infrastructure works Nice To Have
• Google Workspace/Microsoft administration
• AWS/Cloud security