Data Security Service Lead: Shape Enterprise Protection

Arup; Sheffield; On-site; GBP 90,000 - 140,000; Full time

Benefits offered by this job

Profit sharing

Private medical insurance

Life assurance

Flexible benefits

Job summary

Arup is seeking a Data Security Service Lead to stand up a new Data Security service, define its vision, operating model, roadmap and success measures. You\'ll build the team, establish governance and partner with Cyber to embed data protection across the firm.

You will own the Data Security Service end‑to‑end, shaping priorities, advising on complex data risks, and driving a multi‑year delivery plan covering classification, DLP, encryption and lifecycle protection.

Qualifications

• Deep expertise in data security, including data classification, DLP, encryption and lifecycle protection.
• Strong understanding of standards and frameworks (ISO/IEC 27001, NIST CSF, CIS Controls).
• Proven experience owning or leading a global or enterprise-scale security service.
• Ability to operate at strategic and operational levels, turning strategy into sustained delivery.
• Strong stakeholder management, with experience influencing senior leaders and tech teams.

Responsibilities

• Own and deliver the Data Security Service, including vision, roadmap, operating model, and success measures.
• Translate the Data Security Plan into a clear, prioritised, multi-year delivery roadmap covering governance, classification, DLP, encryption, monitoring, and resilience.
• As the Data Security Service Lead, your day will blend strategic leadership with practical impact. You’ll work with senior stakeholders and technical teams to turn data security strategy into reality, shaping priorities, advising on complex data risks, tracking progress, and continuously improving how data is protected across its lifecycle.

Skills

Data security

Data classification

DLP

Encryption

Data lifecycle

Job description

Arup is seeking a Data Security Service Lead to stand up a new Data Security service, define its vision, operating model, roadmap and success measures. You\'ll build the team, establish governance and partner with Cyber to embed data protection across the firm.

You will own the Data Security Service end‑to‑end, shaping priorities, advising on complex data risks, and driving a multi‑year delivery plan covering classification, DLP, encryption and lifecycle protection.