Malted
Information Security Lead
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Information Security Lead
Senior Security Engineer
📍 Edinburgh ⏰ Part-Time – Up to 4 days per week (Hybrid: 2–3 on-site, remote flexibility)
Salary range: £75,000 – £95,000
About Malted
Malted builds specialised customer interaction intelligence for financial institutions. Our platform combines advanced language technology with domain expertise to help firms make faster, accurate decisions.
Our proprietary AI-driven platform reveals signals generic AI misses, delivering insights more securely and efficiently than competitors.
We’re a small, hightech team in Edinburgh, blending machine learning expertise with rigorous product and engineering disciplines.
The Role
You’ll lead Malted’s security roadmap, collaborating closely with our engineering team to embed secure-by-design principles, while ensuring enterprise-grade compliance and risk posture.
Responsibilities
- Compliance & Standards
- Own ISO 27001 certification and drive SOC 2 Type 2 audit readiness.
- Endpoint & IT Security
- Manage device security via MDM (e.g. JumpCloud), with focus on encryption, patching, and access control.
- Cloud & Infrastructure Security
- harden Kubernetes/container environments, enforce IAM policies, and manage vulnerability scanning & remediation.
- Technical Security Implementation
- Deploy and maintain security controls across AWS cloud environments and on-prem systems.
- Identity & Access Management
- Oversee user lifecycle (onboarding, MFA enforcement) and conduct regular access reviews.
- Vendor & Risk Management
- Evaluate third-party security posture and conduct internal risk assessments.
- Security Culture
- Deliver security awareness training.
- Serve as the internal privacy and security expert.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
You Are
We want a security professional who thrives in early-stage startups. Key traits:
- Pragmatic: Balances security maturity with business growth.
- Equally comfortable auditing externally and debugging logs.
- 4+ years in information security (highly recommended: ISO 27001/SOC 2 experience, preferably in startups.
- Strong fundamentals in networking, encryption, and cloud security.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Adds Weight
- Enterprise security tools (MDM, EDR, SSO).
- Financial Services knowledge (compliance hurdles, key regulatories).
- Certifications (CISSP, CISM, or AWS/GCP Security Specialist).
- Scripting & automation (Python or Bash for security checks/reporting).
Company Culture
- Hybrid 3 days in office (Mon/Wed/Fri), remote flexibility.
- Invests in technical excellence and humble collaboration.
- Equal-opportunity employer (diverse backgrounds encouraged).
Compensation & Perks
- £75k–£95k annual salary
- Pension & stock options
- Medical & life insurance
- Professional development support
- Hybrid & time flexibility
- All-hands innovation-driven environment
Location & Offers
- Based in Edinburgh (with support for remote EckCommon: '#' olecule stays done
Ready to apply? Click here
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills