Data Security Service Lead

Arup; Cardiff; On-site; GBP 90,000 - 125,000; Full time

Benefits offered by this job

Profit share

Private medical insurance

Life assurance

Income protection

Flexible benefits

Learning opportunities

Job summary

Arup is seeking a Data Security Service Lead to stand up and own Arup’s new Data Security service, defining its vision, operating model, roadmap and success measures. You’ll build a team, set governance, and collaborate with Cyber to embed data protection across the firm.

You’ll translate strategy into delivery, balancing strategic oversight with hands-on impact, working with senior stakeholders and technical teams to prioritise risk, implement controls, and drive continuous improvement of data

Qualifications

• Deep expertise in data security, including data classification, DLP, encryption, and data lifecycle protection.
• Strong understanding of standards and frameworks (e.g. ISO/IEC 27001, NIST CSF, CIS Controls).
• Proven experience owning or leading a global or enterprise-scale security service or capability.
• Ability to operate at both strategic and operational levels, turning strategy into sustained delivery.
• Strong stakeholder management skills, with experience influencing senior leaders and technical teams.

Responsibilities

• The role provides single-point ownership for data security outcomes across the organisation by formulating & implementing a Data Security Plan into sustained operational delivery.
• Own and deliver the Data Security Service, including vision, roadmap, operating model, and success measures.
• Translate the Data Security Plan into a clear, prioritised, multi-year delivery roadmap covering governance, classification, DLP, encryption, monitoring, and resilience.
• As the Data Security Service Lead, your day will blend strategic leadership with practical impact. You’ll work with senior stakeholders and technical teams to turn data security strategy into reality, shaping priorities, advising on complex data risks, tracking progress, and continuously improving how data is protected across its lifecycle.

Skills

Data security

Data classification

DLP

Encryption

Lifecycle protection

Stakeholder management

Tools

ISO/IEC 27001

NIST CSF

CIS Controls

Job description

Arup is seeking a Data Security Service Lead to stand up and own Arup’s new Data Security service, defining its vision, operating model, roadmap and success measures. You’ll build a team, set governance, and collaborate with Cyber to embed data protection across the firm.

You’ll translate strategy into delivery, balancing strategic oversight with hands-on impact, working with senior stakeholders and technical teams to prioritise risk, implement controls, and drive continuous improvement of data