Data Security Lead

Arup; York and North Yorkshire; On-site; GBP 110,000 - 150,000; Full time

Benefits offered by this job

Profit share

Private medical insurance

Life assurance

Income protection

Flexible benefits

Job summary

Arup seeks a Data Security Service Lead to stand up a new Data Security service, defining vision, operating model and roadmap. You will build the team, establish governance, and work with Cyber peers to embed data protection across how the firm operates and delivers work.

You will own the data security outcomes across the organisation, delivering a multi‑year plan for governance, DLP, encryption, monitoring and resilience, while guiding senior stakeholders and technical teams to turn strategy

Qualifications

• Deep expertise in data security, including data classification, DLP, encryption, and data lifecycle protection.
• Strong understanding of ISO/IEC 27001, NIST CSF, CIS Controls.
• Proven experience owning or leading a global or enterprise-scale security service or capability.
• Ability to operate at both strategic and operational levels, turning strategy into sustained delivery.
• Strong stakeholder management skills, with experience influencing senior leaders and technical teams.

Responsibilities

• Own and deliver the Data Security Service, including vision, roadmap, operating model, and success measures.
• Translate the Data Security Plan into a clear, prioritised, multi‑year delivery roadmap covering governance, classification, DLP, encryption, monitoring, and resilience.
• As the Data Security Service Lead, guide strategy into practical implementations and governance across the organisation.
• Work with senior stakeholders and technical teams to shape priorities, assess data risks and improve protection across the data lifecycle.

Skills

Data security

Data classification

DLP

Encryption

Lifecycle protection

Stakeholder management

Strategic delivery

Security frameworks

Job description

Joining Arup

Arup’s purpose, shared values and collaborative approach has set us apart for over 75 years, guiding how we shape a better world.

Joining Arup

Arup’s purpose, shared values and collaborative approach has set us apart for over 75 years, guiding how we shape a better world.

The Cyber Resilience team is part of the Digital Technology Group and include Data Security, Identity & Access Management, Security Engineering, IAM Administration and Privileged Access Management, the team work alongside Security Operations and Governance, Risk and Compliance to protect Arup’s platforms, information and data.

The Opportunity

At Arup, you belong to an extraordinary collective – in which we encourage individuality to thrive. Our strength comes from how we respect, share and connect our diverse experiences, perspectives and ideas. You will have the opportunity to do socially useful work that has meaning – to Arup, to your career, to our members and the clients and communities we serve.

At Arup, you belong to an extraordinary collective – in which we encourage individuality to thrive. Our strength comes from how we respect, share and connect our diverse experiences, perspectives and ideas. You will have the opportunity do socially useful work that has meaning – to Arup, to your career, to our members and to the clients and communities we serve.

As the Data Security Service Lead, you’ll be responsible for standing up Arup’s new Data Security service, defining its vision, operating model, roadmap and measures of success.

You’ll build the team, establish clear governance, and work closely with peers across Cyber to embed data protection into how the firm operates and delivers work.

• The role provides single‑point ownership for data security outcomes across the organisation by formulating & implementing a Data Security Plan into sustained operational delivery.
• Own and deliver the Data Security Service, including vision, roadmap, operating model, and success measures.
• Translate the Data Security Plan into a clear, prioritised, multi‑year delivery roadmap covering governance, classification, DLP, encryption, monitoring, and resilience.
• As the Data Security Service Lead, your day will blend strategic leadership with practical impact. You’ll work with senior stakeholders and technical teams to turn data security strategy into reality, shaping priorities, advising on complex data risks, tracking progress, and continuously improving how data is protected across its lifecycle.

Did you know: Our Digital Technology team are proud previous winners of the IT Team of the Year at the Chartered Institute of IT’s UK IT Industry Awards.

Is this role right for you?

• Deep expertise in data security, including data classification, DLP, encryption, and data lifecycle protection.
• Strong understanding of relevant standards and frameworks (e.g. ISO/IEC 27001, NIST CSF, CIS Controls).
• Proven experience owning or leading a global or enterprise‑scale security service or capability.
• Ability to operate at both strategic and operational levels, turning strategy into sustained delivery.
• Strong stakeholder management skills, with experience influencing senior leaders and technical teams

What We Offer You

At Arup, we care about each member’s success, so we can grow together.

Guided by our values, we provide an attractive total reward package that recognises the contribution of each of our members to our shared success. As well as competitive, fair and equitable pay, we offer a career in which all of our members can belong, grow and thrive – through benefits that support health and wellbeing, a wide range of learning opportunities and many possibilities to have an impact through the work they do.

• We are owned in trust on behalf of our members, giving us the freedom, with personal responsibility, to set our own direction and choose work that aligns with our purpose and adds to Arup’s legacy. Our members collaborate on ambitious projects to deliver remarkable outcomes for our clients and communities. Profit Share is a key part of our reward, enabling members to share in the results of our collective efforts.
• We care about you and want you to perform at your best, which is why we offer one of the most competitive benefits packages in our sector.
• As a member organisation,everyone shares in our success through a global profit share scheme (payments are dependent on the firm’s financial performance).
• We also provide private medical insurance, Life assurance, Accident insurance and Income protection cover. In addition, you’ll have access to flexible benefits to help you look after all aspects of your wellbeing and give you the freedom and flexibility to find the best solutions for you, your family, and your individual needs.

Different people, shared values

Arup is an equal opportunity employer that actively promotes and nurtures a diverse and inclusive workforce. We welcome applications from individuals of all backgrounds, regardless of age (within legal limits), gender identity or expression, marital status, disability, neurotype or mental health, race or ethnicity, faith or belief, sexual orientation, socioeconomic background, and whether you’re pregnant or on family leave. We are an open environment that embraces diverse experiences, perspectives, and ideas – this drives our excellence.

Guided by our values and alignment with the UN Sustainable Development Goals, we create and contribute to equitable spaces and systems, while cultivating a sense of belonging for all. Our internal employee networks support our inclusive culture: from race, ethnicity and cross-cultural working to gender equity and LGBTQ+ and disability inclusion – we aim to create a space for you to express yourself and make a positive difference. Discover more about life at Arup at Careers - Your Life at Arup .

We are committed to making our recruitment process and workplaces accessible to all candidates. Please let us know if you need any assistance or reasonable adjustments throughout your application or interview process, and/or to perform the essential functions of the role. We will do everything we can to support you.