InfoSec Engineer

Lever, Inc.; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Equity

Competitive salary

Pension contributions

Hybrid work

Team retreats

Job summary

Valarian Technologies Limited is seeking a Head of Information Security to define and lead our security strategy across cloud, SaaS, and internal tooling. You will own end‑to‑end security, from IAM and SSO to data protection and incident response, partnering with Engineering, Legal, and Leadership to embed secure‑by‑design practices.

You will drive ISO‑27001 and SOC 2 compliance, mature risk management, and build a scalable security program in a cloud‑first, high‑growth environment.

Qualifications

• Proven experience leading information security in a cloud-first, SaaS-heavy environment.
• Deep expertise securing cloud infrastructure and modern workplace tooling.
• Strong hands-on experience with IAM, SSO and zero-trust approaches.
• Experience managing vendor risk and access governance; SOC 2 and ISO-27001 knowledge.

Responsibilities

• Own and execute Valarian’s end-to-end information security strategy.
• Lead and mature security posture across compliance frameworks (ISO-27001, SOC 2).
• Design and implement scalable security architecture across cloud, infra, and apps.
• Partner with Engineering to embed secure-by-design principles.
• Build, manage, and improve security policies, standards, and controls.
• Lead risk management, threat modeling, and vulnerability management.
• Oversee incident detection, response, and recovery planning.
• Drive security awareness and training across the company.
• Establish IAM, SSO, and device security; manage audits and external assessments.
• Hire and lead a high-performing security team.

Skills

Information security leadership

Cloud security

IAM & SSO

Zero-trust

Vendor risk governance

SOC 2 knowledge

ISO-27001 knowledge

Security tooling

Stakeholder management

Security program

Tools

SIEM

EDR

CSPM

Job description

Valarian: Innovating for the new era of digital sovereignty

Valarian Technologies is a dual-use technology company building critical tools to safeguard the future in an era of evolving global security challenges. We're rethinking security beyond traditional military domains, addressing asymmetric threats that impact our technological advantage, economic strength, and democratic institutions.

We build Acra – the platform foundation for everything we do as a dual-use technology company. The platform’s name, rooted in the Greek word for citadel (or, fortress), reflects the design and purpose of our infrastructure-agnostic secure enclaves: protecting critical data. Some of the government and commercial workflows include: increased operational resiliency for mission‑critical systems and functions; enabling organizations to more quickly and widely adopt emerging technologies while ensuring the integrity of their intellectual property; information flow during disaster response scenarios, and zero‑trust / least‑privilege environments for M&A, attorney‑client privileged communications, etc. And we’ve only scratched the surface.

At our core, we're driven by a shared mission and a belief in making a tangible impact on our world. Whether you join our London HQ or the wider global organisation, you’ll be a part of collaborative, high‑performing teams, creating cutting‑edge software, platforms, and infrastructure.

The Role

As Head of Information Security at Valarian, you will define and lead our security strategy with a strong focus on protecting our digital ecosystem, spanning cloud infrastructure, SaaS platforms, and internal tooling. You’ll be responsible for securing how our organisation operates day‑to‑day: from identity and access across SaaS tools, to cloud architecture, to data protection across systems.

This is a hands‑on leadership role combining strategy, architecture, and execution. You’ll work closely with Engineering, Product, Legal, and Leadership to embed security into everything we build, while evolving our compliance posture across ISO‑27001 and SOC‑2 (including expansion into additional controls).

What you’ll do:

• Own and execute Valarian’s end‑to‑end information security strategy
• Lead and mature our security posture across compliance frameworks, including ISO‑27001, SOC 2, and expansion into additional control frameworks
• Design and implement scalable security architecture across cloud, infrastructure, and applications
• Partner with Engineering to embed secure‑by‑design principles into development workflows
• Build, manage, and continuously improve security policies, standards, and controls
• Lead risk management, threat modeling, and vulnerability management processes
• Oversee incident detection, response, and recovery planning
• Drive security awareness and training across the company
• Establish and manage identity and access management (IAM), SSO, and device security across the organisation
• Manage audits, certifications, and relationships with external assessors
• Establish metrics and reporting to provide visibility into security posture and risk
• Hire, develop, and lead a high‑performing security team as the company grows

What you’ll bring:

• Proven experience leading information security in a cloud‑first, SaaS‑heavy environment
• Deep expertise in securing cloud infrastructure and modern workplace tooling
• Strong hands‑on experience with identity and access management, SSO, and zero‑trust approaches
• Experience managing and securing a broad ecosystem, including vendor risk and access governance
• Practical experience with SOC 2 and ISO‑27001
• Strong understanding of cloud security principles (networking, IAM, secrets management, logging, monitoring)
• Experience implementing security tooling such as SIEM, EDR, and CSPM security platforms
• Track record of building scalable, pragmatic security programs in high‑growth environments
• Ability to balance strong security practices with usability and business velocity
• Excellent stakeholder management and communication skills across teams
• Experience building or scaling security teams (or readiness to do so)
• A focus on real‑world risk reduction over checkbox compliance

Benefits

Our benefits are designed to ensure our employees feel taken care of and are proud to be a part of the Valarian team. We are committed to consistently enhancing our benefit package, taking into account the overall well‑being and needs of our teammates. Here are the key benefits accessible to all employees at Valarian Technologies:

• Equity – because you have the right to own what you’re building
• A competitive salary – because we value your unique skills
• Employer pension contributions – because you deserve a secure future
• Hybrid work setup – because everyone has different needs
• Rewarding company retreats and meetups that respect your work/life balance – because we love getting to know each other!

Life at Valarian

Our culture is built on inclusivity, compassion and flexibility – we want everyone to be empowered to achieve their goals at Valarian.

The world is changing, and so is our way of working. If you want to join us in the London office – it’s quite nice! – you’re welcome to; and if you’d prefer to work remotely, that’s fine too.

And as we build elegant solutions to simplify the complexities of business collaboration, we also simplify work life: contribute wherever and whenever allows you to be your best self. We trust each other to consistently raise the bar, and we challenge each other to continually reach new heights.

Valarian Technologies Limited is an equal opportunity employer and welcomes applications from individuals regardless of race, colour, religion, sex, sexual orientation, gender, identity or expression, national origin, age, disability, genetic information, marital status, veteran, amnesty, or any other legally protected characteristic.

We are committed to ensuring a fair and inclusive recruitment process and providing employment opportunities to all applicants. Decision recruitment, hiring, and employment are based solely on qualifications, skills, and experience relevant to the job requirements.