How can I safely allow someone to connect and use my WiFi?

My neighbour has no Internet. I am happy for him to connect using my WiFi. My idea is to allow him access via a bit of kit (such as a router/Bridge?) configured to (1) limit his usage and (2) make me safe from any virus he may download. I trust him and he has offered to pay me so I want to make it work. Any ideas anyone?