Security Architect - Data

JD Sports Fashion Plc; Bury; On-site; GBP 50,000 - 90,000; Full time

Job summary

Join a forward-thinking company as a Data Security Architect, where your expertise will shape the future of information security. In this pivotal role, you will drive the development and implementation of cutting-edge security architectures and solutions, ensuring the protection of sensitive data across diverse environments. Collaborate with a dynamic team to enhance operational excellence and support the company's ambitious digital transformation. With a commitment to innovation and customer focus, this role offers a unique opportunity to influence security strategies and safeguard vital information while enjoying a range of employee benefits and development opportunities.

Benefits

Staff discount on JD Group products

Personal development opportunities

Flexible working hours

Health and wellness programs

Qualifications

• Professional certifications required in Information Security or Cybersecurity.
• 5+ years of IT security experience with data security enforcement.

Responsibilities

• Lead the Data Security Architecture capability and implement security technologies.
• Develop and maintain a global data security strategy, ensuring compliance.

Skills

Information Security

Cybersecurity

Data Security Enforcement

Project Management

Technical Writing

Problem Solving

Decision Making

Education

Professional certifications in Information Security or Cybersecurity

5+ years of IT security experience

Tools

Data Loss Prevention (DLP)

Digital Rights Management (RMS)

Microsoft Purview

Job description

JD Sports- Head Office, Warwick House, Bury, Bury, United Kingdom Req #531

08 April 2025

Established in 1981 with a single store in the Northwest of England, the JD Group is a leading omni-channel retailer of Sports Fashion, Outdoors and Gyms with our colleagues working in stores across several retail fascias in many markets around the world.

JD Sports Fashion Plc was listed on the London Stock Exchange in 1996 and has been a FTSE100 publicly quoted company since 2019 and continues to grow in the UK and internationally.

We want to be the leading global omnichannel retailer in the sports and outdoor industry. To be a part of this successful company and help us to achieve this you will have the desire to ingrain our strategic goals of being a people-led, innovative and customer-focused organisation which provides operational excellence whilst identifying new areas of growth as part of our day to day objectives.

Role Purpose:

We are looking for an experienced Data Security Architect to join our growing Information Security team.

Reporting to the Global Head of Security Strategy, Architecture & Engineering and working closely with IT technology and architecture functions, you will develop and implement information security architecture and technology solutions to ensure information security and compliance requirements of the organisation as we go through our Digital Transformation and modernisation and beyond.

As a Data Security Architect, you will possess in-depth knowledge of a broad range of information security controls to protect various data stores, both on-premises and in the cloud.

The Data Security Architect is responsible for developing and executing a global data security strategy, ensuring the protection of sensitive information across the JD Group.

Key Responsibilities:

• Implement and lead the Data Security Architecture capability across JD Sports, formalising principles through reference architectures, diagrams, and procedures.
• Research, evaluate, and implement data security technologies, processes, and services to reduce cyber risk and enhance performance.
• Develop and maintain a global data security strategy, including encryption, tokenization, anonymization, and Data Loss Prevention (DLP).
• Ensure information security aspects of applications and services safeguard JD Sports’ data, IP, customers, and brand reputation.
• Provide security guidance to business technology teams, ensuring security is integrated from the outset of projects throughout their lifecycle.
• Work with Data Privacy Office to ensure adequate protection of sensitive information.
• Translate security requirements into architectural blueprints and patterns, balancing risk, budget, and operational challenges.
• Ensure compliance with regulatory standards such as GDPR and PCI DSS.
• Provide subject matter expertise and assess security measures, recommending improvements in collaboration with IT teams.
• Build and maintain relationships with technology vendors and business partners.
• In conjunction with JD’s Managed Detect and Respond services, develop and maintain incident response plans for data security breaches, ensuring quick and effective resolution.

Qualifications and Skills:

• Professional certifications in Information Security or Cybersecurity (e.g. Certified Information Systems Security Professional, Certified Information Security Manager).
• 5+ years of IT security experience working on data security enforcement.
• Strong understanding of security frameworks like NIST, ISO 27001, and CIS Controls, and their application to enhance security and ensure compliance.
• Proven expertise in designing and implementing data security controls in geographically dispersed and hybrid cloud environments.
• Hands-on experience with modern enterprise-level data protection tools, including Data Loss Prevention (DLP), Digital Rights Management (RMS), data encryption/tokenization, and data discovery.
• Strong familiarity with Microsoft security solutions, such as AD RMS, Azure RMS, and Microsoft Purview for data governance, classification, and compliance monitoring.
• In-depth knowledge of PKI, including certificate lifecycle management, encryption protocols, and secure key management practices.
• Ability to lead and execute large, complex projects related to data security (e.g. introduction of a global DLP solution, replacement of a PKI environment).
• Considerable technical writing proficiency, oral presentation skills, problem-solving, and decision-making skills.
• Experience in using architecture methodologies such as TOGAF and SABSA.
• Practical experience in Agile/DevOps organizations and cultures.

We know our colleagues work tirelessly to make JD Sports the success it is today and in turn, we offer them some amazing benefits including staff discount on JD Group and other brands within the organisation and personal development opportunities to learn and develop at work.