Head of Information Security

About the role

This is a hands‑on role with real ownership. You will take responsibility for QuantumLight’s perimeter security function, working across technology, processes and people to identify risks and put the right controls in place.

Key responsibilities

• Own and enforce security policies, controls and procedures
• Manage access, identity, devices and endpoint security
• Monitor security risks, alerts and permissions across our systems
• Ensure security of our infrastructure, cloud environment and internal tools
• Manage GDPR, ISO, security questionnaires, audits and certification processes
• Conduct security risk assessments and coordinate external penetration testing
• Work closely with Legal, IT and the wider team to continuously improve our security posture

Required profile

• Experience in information security, security engineering, security operations or a similar role
• Strong understanding of networks, infrastructure, cloud and identity/access management
• Hands‑on experience implementing and enforcing security controls
• Comfortable owning security in a small, fast‑moving company
• Strong risk assessment and problem‑solving skills
• Good understanding of GDPR/ISO and security compliance
• Technically strong enough to understand our infrastructure

Required skills

• Google Workspace
• Microsoft administration
• AWS
• Cloud security