Lead Data Security Architect

CFC; City Of London; On-site; GBP 90,000 - 130,000; Full time

Job summary

CFC is seeking a Lead Security Engineer (Data) to design and deliver data protection across our systems, products and workflows. You will lead on privacy and security architecture, turning requirements into technical controls and reusable patterns while working with engineering, data, privacy and business units.

You will design and implement data discovery, classification and loss-prevention controls, publish standards for encryption and secure disposal, and lead threat modeling activities to

Qualifications

• Deep experience designing privacy and security for a fast-moving technology-forward organisation.
• Experience designing data discovery, classification, loss-prevention controls that other teams can apply.
• Experience handling sensitive investigations with discretion, including evidence collection and chain of custody.

Responsibilities

• Design, implement and operate data discovery, classification and loss-prevention controls across CFC's stores, and record coverage in the control register.
• Create reusable patterns for encryption, masking and secure disposal, and publish them as standards for new systems.
• Lead cross-functional data-protection design reviews for new products and record the decisions as standards.
• Design technical guardrails for data handling, including generative AI tools, and publish the guardrail catalogue in the standard.

Skills

Privacy architecture

Security engineering

Data protection design

Policy-as-code

Threat modeling

Tools

Automation

Job description

CFC is seeking a Lead Security Engineer (Data) to design and deliver data protection across our systems, products and workflows. You will lead on privacy and security architecture, turning requirements into technical controls and reusable patterns while working with engineering, data, privacy and business units.

You will design and implement data discovery, classification and loss-prevention controls, publish standards for encryption and secure disposal, and lead threat modeling activities to