Associate Principal Cyber Security Architect (Data)

dyson; Singapore; On-site; SGD 140,000 - 210,000; Full time

Job summary

Dyson seeks an Associate Principal Cybersecurity Architect for Data to lead the data security architecture across endpoints, email, SaaS and cloud platforms. You will translate business, legal and privacy requirements into a coherent data protection strategy and define governance patterns and guardrails that balance IP protection with a usable employee experience.

You will drive architecture reviews, risk assessments and cross-functional collaboration with data owners, privacy, Legal, HR and

Qualifications

• Translate business, legal, privacy and security requirements into a coherent data protection architecture.
• Define patterns, control objectives and implementation guardrails for data through its lifecycle.
• Lead security architecture reviews and risk assessments for data initiatives.

Responsibilities

• Set data security architecture direction and multi-year roadmap for data classification, DLP and protective controls.
• Define enterprise data classification and handling architecture with labeling, ownership and retention dependencies.
• Architect data security across endpoints, collaboration platforms, SaaS, cloud and databases.
• Design risk-based DLP controls with detection logic, policy conditions, and encryption/monitoring.

Skills

Data loss prevention

Data classification

Security architecture

Threat modelling

Cloud security

Microsoft 365

Cross-functional collaboration

Job description

About us

At Dyson, we are not just creating innovative, technology-enabled products; we are also breaking new ground in cybersecurity. Our products are becoming more advanced and interconnected, which means we face a constantly evolving cyber threat landscape. This requires a highly skilled candidate to join our team, with a passion for staying ahead of emerging threats and keeping our products secure.

We take a proactive approach to cybersecurity. We do not wait for threats to emerge; we anticipate them and respond with innovative solutions. This means that at Dyson, you will have the opportunity to work with innovative technologies, like artificial intelligence and machine learning, to protect our products and customers.

You will be part of a team of cybersecurity experts, utilizing the latest tools and technologies to identify and respond to threats in real-time. You will work closely with our engineering and product teams to ensure that security is integrated into every aspect of our business.

Join our team at Dyson, and you will be at the forefront of cybersecurity, working on some of the most innovative and advanced products in the industry. You will have the opportunity to develop your skills and knowledge, collaborating with a talented team of experts to ensure we are always secure. If you are passionate about cybersecurity and looking for an exciting and challenging role, Dyson is the place for you.

About the role

As Associate Principal Cybersecurity Architect for Data, you will provide architecture leadership for Dyson's data security capabilities. Your core focus will be Data Loss Prevention, data discovery and classification, and protection of structured and unstructured information across endpoints, collaboration services, email, SaaS, cloud platforms, databases, data platforms and integrations.

You will translate business, legal, privacy and security requirements into a coherent data protection architecture. You will define patterns, control objectives and implementation guardrails that follow data through its lifecycle and apply proportionate protection based on sensitivity, context, user activity and approved business use. The role must balance strong protection of intellectual property and regulated information with a usable employee and engineering experience.

What you will do

• Set the data security architecture direction, principles, target state and multi-year capability roadmap for data classification, Data Loss Prevention and associated protective controls.
• Define enterprise data classification and handling architecture, including classification levels, labelling, inheritance, metadata, ownership, approved handling rules, retention dependencies and integration with technical enforcement.
• Architect the architecture for structured and unstructured data across endpoints, file repositories, collaboration platforms, email, SaaS, cloud storage, databases and data platforms.
• Design risk-based DLP controls across endpoint, email, web, cloud and collaboration channels, including detection logic, contextual policy conditions, user prompts, blocking, quarantine, encryption, alerting and exception handling.
• Ensure controls address data at rest, in use and in motion, including approved sharing, downloads, printing, clipboard use, removable media, browser uploads, application transfers and external collaboration.
• Define patterns for encryption, key management, tokenisation, masking, rights management, access control and secure data sharing, selecting controls according to data sensitivity and business context.
• Lead security architecture reviews and risk assessments for initiatives that create, collect, store, process, analyse, share or dispose of sensitive data. Record decisions, control requirements, exceptions and residual risk in an audit-defensible manner.
• Partner with data owners, Data Governance, Privacy, Legal, HR, Employee Relations, Insider Risk, Cyber Operations and technology teams to establish clear ownership and proportionate enforcement processes.
• Design the integration of DLP and classification telemetry into monitoring, investigation and incident response processes, with sufficient context, evidence handling, access controls and escalation routes.
• Create and govern reusable security patterns for Microsoft 365, endpoints, SaaS applications, cloud platforms, data lakes, analytics services, databases, data integration and artificial intelligence use cases.
• Define requirements for Data Security Posture Management and data-security visibility, including discovery of sensitive stores, exposure paths, excessive access, stale data, risky sharing and control coverage gaps.
• Establish policy lifecycle governance covering design, simulation, testing, deployment, tuning, false-positive management, change control, exceptions, periodic review and measurable retirement criteria.
• Guide technical product teams and suppliers through design, implementation and transit