Lead Data Security Engineer – Privacy, Automation & Guardrails

CFC; Greater London; Hybride; GBP 100 000 - 130 000; Plein temps

Résumé du poste

CFC is seeking a Lead Security Engineer (Data) in London to design and deliver data protection across systems, products and workflows. This individual contributor leadership role focuses on turning privacy requirements into effective technical controls.

You will work with engineering, data, privacy and business teams to create reusable patterns, policy-as-code, and automated controls while evolving the security architecture as the tech environment grows.

Qualifications

• Experience designing privacy and security for a fast-moving tech organisation.
• Experience designing classification, loss prevention, encryption, disposal and reporting controls.
• Record of data-loss or insider investigations closed with a control that stopped the same failure returning.
• Experience handling sensitive investigations with appropriate discretion, including evidence collection and working with HR, Legal and other stakeholders.

Responsabilités

• Design, implement and operate data discovery, classification and loss-prevention controls across CFC's stores.
• Create reusable patterns for encryption, masking and secure disposal, and publish standards for new systems.
• Implement data-loss-prevention policy-as-code for email, endpoints and cloud stores, and record test results for each rule change.
• Diagnose insider and data-loss incidents to root cause, implement the control to prevent recurrence, and document both in the incident report.
• Preserve and prepare digital evidence for investigations, maintaining chain of custody and applying digital evidence principles.
• Lead cross-functional data-protection design reviews for new products and record the decisions as standards.
• Design technical guardrails for data handling, including generative AI tools, and publish the guardrail catalogue.
• Build security metrics for classification coverage, loss-prevention events and encryption of sensitive stores, and publish them to data owners.

Connaissances

Privacy and security design

Data-protection engineering

Policy-as-code

Data-loss prevention

Threat modelling

Automation through code

Encryption and disposal

Cross-functional collaboration

Description du poste

CFC is seeking a Lead Security Engineer (Data) in London to design and deliver data protection across systems, products and workflows. This individual contributor leadership role focuses on turning privacy requirements into effective technical controls.

You will work with engineering, data, privacy and business teams to create reusable patterns, policy-as-code, and automated controls while evolving the security architecture as the tech environment grows.