Information Security Lead — Perimeter & Compliance

QuantumLight; United Kingdom; On-site; GBP 70,000 - 100,000; Full time

Job summary

QuantumLight is seeking a hands-on security lead to own the perimeter security function and drive risk-based controls across technology, processes and people. You will secure systems and infrastructure, develop policies and support audits and regulatory requirements to build a strong security foundation.

Responsibilities include enforcing security controls, managing access and endpoint security, coordinating GDPR/ISO audits, and collaborating with Legal and IT to continually raise our security

Qualifications

• Experience in information security, security engineering, security operations or a similar role.
• Strong understanding of networks, infrastructure, cloud and identity/access management.
• Hands-on experience implementing and enforcing security controls.
• Comfortable owning security in a small, fast-moving company.
• Strong risk assessment and problem-solving skills.
• Good understanding of GDPR/ISO and security compliance.
• You don't need to be a software engineer or penetration tester, but you should understand how our infrastructure works.

Responsibilities

• Own and enforce security policies, controls and procedures.
• Manage access, identity, devices and endpoint security.
• Monitor security risks, alerts and permissions across our systems.
• Ensure security of our infrastructure, cloud environment and internal tools.
• Manage GDPR, ISO, security questionnaires, audits and certification processes.
• Conduct security risk assessments and coordinate external penetration testing.
• Work closely with Legal, IT and the wider team to continuously improve our security posture.

Skills

Information security

Security engineering

Security operations

Risk assessment

GDPR/ISO awareness

Job description

QuantumLight is seeking a hands-on security lead to own the perimeter security function and drive risk-based controls across technology, processes and people. You will secure systems and infrastructure, develop policies and support audits and regulatory requirements to build a strong security foundation.

Responsibilities include enforcing security controls, managing access and endpoint security, coordinating GDPR/ISO audits, and collaborating with Legal and IT to continually raise our security