Associate Principal Cyber Security Architect (Data)

Dyson; Singapore; On-site; SGD 240,000 - 360,000; Full time

Job summary

Dyson is seeking an Associate Principal Cybersecurity Architect for Data to lead architecture for data protection across endpoints, collaboration services, email, SaaS and cloud platforms. You will translate business and legal requirements into a coherent data protection architecture, defining patterns, guardrails and risk-based controls.

You will partner with Data Governance, Privacy, Legal, HR and technology teams to establish ownership and proportionate enforcement, while balancing secure

Qualifications

• Significant experience in security architecture and data protection.
• Deep knowledge of Data Loss Prevention across endpoints, email, web, cloud and collaboration channels.
• Ability to translate legal, privacy and business requirements into technical controls.
• Strong data lifecycle risk understanding including protection, retention and disposal.
• Experience connecting data-security controls to SIEM and incident response.

Responsibilities

• Set data security architecture direction, principles and multi-year roadmap for data classification and DLP.
• Define enterprise data classification, handling architecture and inheritance rules.
• Architect data discovery/classification across structured and unstructured data.
• Design risk-based DLP controls across endpoints, email, web, cloud and collaboration channels.
• Ensure controls address data at rest, in use and in motion with approved sharing and restrictions.
• Define patterns for encryption, key management, tokenisation and secure sharing.
• Lead security architecture reviews and risk assessments for data initiatives.
• Collaborate with Data Governance, Privacy, Legal and IT teams for governance.
• Integrate DLP/classification telemetry into monitoring and incident response.
• Create reusable security patterns for Microsoft 365, endpoints and cloud platforms.
• Define requirements for Data Security Posture Management and visibility.
• Establish policy lifecycle governance and measurable retirement criteria.
• Guide product teams and suppliers through design to operations, scalable and privacy-aware.
• Develop metrics and evidence for data discovery coverage and risk reduction.
• Build organizational capability with standards, playbooks and guidance.

Skills

Security architecture

Data Loss Prevention

Data discovery

Classification

Encryption

Cloud security

Stakeholder management

SIEM integration

Vendor evaluation

Tools

Microsoft Purview

FortiDLP

Netskope

Job description

About us

At Dyson, we are not just creating innovative, technology-enabled products; we are also breaking new ground in cybersecurity. Our products are becoming more advanced and interconnected, which means we face a constantly evolving cyber threat landscape. This requires a highly skilled candidate to join our team, with a passion for staying ahead of emerging threats and keeping our products secure.

We take a proactive approach to cybersecurity. We do not wait for threats to emerge; we anticipate them and respond with innovative solutions. This means that at Dyson, you will have the opportunity to work with innovative technologies, like artificial intelligence and machine learning, to protect our products and customers.

You will be part of a team of cybersecurity experts, utilizing the latest tools and technologies to identify and respond to threats in real-time. You will work closely with our engineering and product teams to ensure that security is integrated into every aspect of our business.

Join our team at Dyson, and you will be at the forefront of cybersecurity, working on some of the most innovative and advanced products in the industry. You will have the opportunity to develop your skills and knowledge, collaborating with a talented team of experts to ensure we are always secure. If you are passionate about cybersecurity and looking for an exciting and challenging role, Dyson is the place for you.

About the role

As Associate Principal Cybersecurity Architect for Data, you will provide architecture leadership for Dyson’s data security capabilities. Your core focus will be Data Loss Prevention, data discovery and classification, and protection of structured and unstructured information across endpoints, collaboration services, email, SaaS, cloud platforms, databases, data platforms and integrations.

You will translate business, legal, privacy and security requirements into a coherent data protection architecture. You will define patterns, control objectives and implementation guardrails that follow data through its lifecycle and apply proportionate protection based on sensitivity, context, user activity and approved business use. The role must balance strong protection of intellectual property and regulated information with a usable employee and engineering experience.

What you will do

• Set the data security architecture direction, principles, target state and multi-year capability roadmap for data classification, Data Loss Prevention and associated protective controls.
• Define enterprise data classification and handling architecture, including classification levels, labelling, inheritance, metadata, ownership, approved handling rules, retentiondependenciesand integration with technical enforcement.
• Architect data discovery and classification capabilities for structured and unstructured data across endpoints, file repositories, collaboration platforms, email, SaaS, cloud storage,databasesand data platforms.
• Design risk-based DLP controls across endpoint, email, web,cloudand collaboration channels, including detection logic, contextual policy conditions, user prompts, blocking, quarantine, encryption,alertingand exception handling.
• Ensure controls address data at rest, in use and in motion, including approved sharing, downloads, printing, clipboard use, removable media, browser uploads, application transfers and external collaboration.
• Define patterns for encryption, key management,tokenisation, masking, rights management, accesscontroland secure data sharing, selecting controls according to data sensitivity and business context.
• Lead security architecture reviews and risk assessments for initiatives that create, collect, store, process,analyse,shareor dispose of sensitive data. Record decisions, control requirements,exceptionsand residual risk in an audit-defensible manner.
• Partner with data owners, Data Governance, Privacy, Legal, HR, Employee Relations, Insider Risk, CyberOperationsand technology teams toestablishclear ownership and proportionate enforcement processes.
• Design the integration of DLP and classification telemetry into monitoring,investigationand incident response processes, with sufficient context, evidence handling, access controls and escalation routes.
• Create and govern reusable security patterns for Microsoft 365, endpoints, SaaS applications, cloud platforms, data lakes, analytics services, databases, dataintegrationand artificial intelligence use cases.
• Define requirements for Data Security Posture Management and data-security visibility, including discovery of sensitive stores, exposure paths, excessive access, stale data, riskysharingand control coverage gaps.
• Establish policy lifecycle governance covering design, simulation, testing, deployment, tuning, false-positive management, change control, exceptions, periodicreviewand measurable retirement criteria.
• Guidetechnical product teams and suppliers through design,implementationand transition into operations, ensuring solutions are scalable, supportable, privacy-aware and aligned with architecture standards.
• Develop metrics and control evidence for data discovery coverage, classification adoption, DLP effectiveness, policy quality, alert disposition,exceptionageing,remediationand material data-risk reduction.
• Buildorganisationalcapability by producing standards, reference architectures, patterns,playbooksand role-based guidance, and by coaching architects, engineers, dataownersand operational teams.

About you

You are an experienced data security architect who can work at strategic,solutionand operational depth. You can guide senior stakeholders through complex data-risk trade-offs whileremainingsufficiently technical to challenge product design, policy logic, integrationpatternsand delivery plans.

To succeed in this role you should,

• Significant experiencein security architecture, datasecurityor information protection, with accountability for complex enterprise-scale outcomes.
• Deep practical knowledge of Data Loss Prevention architecture acrossendpoint, email, web,cloudand collaboration channels, including policy design, deployment,tuningand operational integration.
• Strong understanding of data discovery, classification and labelling for structured and unstructured data, including metadata, exact data matching, document fingerprinting,classifiersand contextual detection.
• Experience definingclassificationtaxonomies and translating legal, privacy, regulatory and business requirements into clear handling rules and technical controls.
• Strong knowledge of data lifecycle risks covering creation, collection, storage, processing, analytics, sharing, archival and secure disposal.
• Experience designing data protection controls such as encryption, rights management, key management,tokenisation, masking, accesscontrolsand secure collaboration.
• Ability to assess data flows, trust boundaries, identities, entitlements, storage locations, third parties and cross-border transfers, and to turn findings into actionable architecture requirements.
• Knowledge of cloud, SaaS,endpointand collaboration architectures, with the ability to evaluate control consistency across hybrid and multi-platform environments.
• UnderstandingofData Security Posture Management concepts, data inventories, exposure analysis, over-permissioningandsensitive-dataattack paths.
• Experience connecting data-security controls to SIEM, case management, incident response and insider-risk workflows while preserving privacy,confidentialityandappropriate segregationof duties.
• Experience creating reference architectures, standards, design patterns, technical requirements, low-level design guidance and risk decisions for both engineering and governance audiences.
• Ability to evaluate security products and suppliers through requirements, proof-of-value criteria, architecture fit, integration, operationalsustainabilityand measurable outcomes.
• Strong communication,facilitationand influencing skills, including the ability to broker workable decisions across Security, Data, Legal, Privacy,HRand technology teams.
• Ability to lead through influence, mentor others and coordinate virtual teams and external partners with limited supervision.
• Hands-on experience with enterprise information-protection and DLP platforms, including Microsoft Purview, FortiDLP, Netskope, or comparable technologies, without being limited to a single vendor.
• Experience securing high-value intellectual property, source code, engineering data, customer information, employeedataor regulated datasets.
• Experience with database and data-platform protections, including activity monitoring, fine-grained access, masking,tokenisationandsensitive-datadiscovery.
• Knowledge of privacy engineering, records management, data retention, eDiscovery and insider-risk disciplines, and how their responsibilities intersect with security architecture.
• Experience designing data controls for analytics, machine learning and generative AI, including data preparation, training inputs, prompts, outputs, retrievalsourcesand model-access boundaries.
• Relevant certifications such as CISSP, ISSAP, CCSP, CISM, Microsoft security credentials or privacy and data-governance certifications. Certifications support, but do not replace, demonstratedpractical capability.

Dyson is an equal opportunity employer. We know that great minds don’t think alike, and it takes all kinds of minds to make our technology so unique. We welcome applications from all backgrounds and employment decisions are made without regard to race, colour, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other any other dimension of diversity.