Data Governance Lead

Arcus Search; Greater London; Hybrid; GBP 110,000 - 150,000; Full time

Job summary

Arcus Search is seeking a Data Governance & Management Lead in the United Kingdom to lead data classification, protection and retention programs. You will ensure compliance with GDPR, CCPA, UK DP Act, and coordinate secure data sharing and analytics governance across the business.

The role requires 7–10 years’ experience in data governance or information risk, with strong analytical and communication skills. Certifications such as CISSP, CISM or CIPP/E are highly valued and beneficial.

Qualifications

• Advanced degree in Information Management, Data Science, Law, Risk Management, or related field.
• 7-10 years’ experience in data governance, data protection, or information risk.
• Working knowledge of data governance/protection regulations (GDPR, CCPA, UK Data Protection Act) and industry frameworks.
• Experience with data classification, lifecycle management, and secure data sharing best practices.
• Excellent analytical, problem-solving, and communication skills.
• Recognized professional certifications (e.g., CISSP, CISM, CIPP/E, CDMP, CIPT, ISO 27001, or similar) are highly valued.

Responsibilities

• Oversee data classification, protection and management of sensitive and critical data across the business.
• Monitor and enforce data retention and deletion practices compliant with GDPR, CCPA and UK DP Act.
• Review and govern secure data sharing practices with internal teams and third parties.
• Govern reporting and analytics processes to preserve data integrity and privacy.
• Develop, review and enhance data governance and privacy policies; advise on regulatory requirements.
• Conduct risk assessments and provide independent challenge to 1st line functions.
• Contribute to staff training and awareness on data privacy and safe handling.

Skills

Analytical skills

Communication skills

Problem solving

Data governance

Education

Advanced degree in Information Management

Job description

Data Governance & Management Lead

Data classification, protection, retention (GDPR, CCPA, UK Data Protection Act etc), secure data sharing, reporting & analytics etc.

Key Responsibilities

Data Classification & Protection:

• Oversee and challenge the identification, classification, and management of sensitive and critical data across the business, ensure appropriate controls are in place and consistently applied.

Data Retention & Compliance:

• Assess and monitor data retention and deletion practices to ensure compliance with global regulations such as GDPR, CCPA, and the UK Data Protection Act.

Secure Data Sharing:

• Review and evaluate practices for secure data exchange internally and with third parties, ensure data transfer controls meet industry best practices and adhere to legal and regulatory standards.

Reporting & Analytics Governance:

• Oversee governance of reporting and analytics processes to preserve data integrity, privacy, and accuracy, partnering with business and technology teams.

Policy Review & Development:

• Develop, review, and enhance data governance, classification, and privacy policies, advise on industry best practices and emerging regulatory requirements.

Risk & Control Assessment:

• Conduct risk assessments and deep dives on data-related processes, provide independent challenge and recommendations to 1st line functions.

Training & Awareness:

• Contribute to staff training and awareness initiatives on data privacy, classification, and safe handling.

Requirements

• Advanced degree in Information Management, Data Science, Law, Risk Management, or related field (or equivalent experience).
• 7-10 years’ experience in data governance, data protection, or information risk, preferably within the fintech or financial services sectors.
• Working knowledge of data governance/protection regulations (e.g., GDPR, CCPA, UK Data Protection Act, BCBS 239) and industry frameworks
• Experience with data classification, lifecycle management, and secure data sharing best practices.
• Excellent analytical, problem-solving, and communication skills.
• Recognized professional certifications (e.g., CISSP, CISM, CIPP/E, CDMP, CIPT, ISO 27001, or similar) are highly valued.