About the Opportunity
Take ownership of how sensitive data is secured across a complex, enterprise environment. This role is focused on building and maintaining robust data protection capabilities that support critical operations. You will work on systems where security needs to be engineered in from the ground up and perform reliably at scale.
The Role
You will be responsible for designing and implementing data security controls across a mix of cloud, on-premise, and operational technology environments. The role combines hands-on engineering with architectural input, requiring you to balance immediate delivery with long-term design. You will work closely with teams across security, infrastructure, and applications to ensure data protection is consistently applied and aligned with broader security objectives.
Key Responsibilities
- Design and implement data protection solutions including DLP, DSPM, tokenisation, and data classification
- Manage and evolve cryptographic services, including PKI, HSMs, certificate lifecycle, and secrets management
- Define and enforce standards for encryption, key management, and data handling across platforms
- Work with engineering teams to embed data protection controls into systems and services
- Conduct risk assessments focused on sensitive data and drive remediation efforts
- Collaborate across IAM, cloud, application, and network security to align controls
- Evaluate new technologies, run proof of concepts, and strengthen existing controls
- Contribute to security architecture and integrate controls into DevSecOps pipelines
What You’ll Bring
Essential
- 10+ years in cybersecurity, including at least 5+ years focused on data security and cryptography
- Strong, hands-on experience with data protection technologies: DLP, DSPM, data classification, tokenisation, PKI, HSM, and secrets management
- Practical experience designing and operating cryptographic services, including key lifecycle management
- Understanding of post-quantum cryptography readiness and evolving enterprise crypto requirements
- Experience working in regulated, global environments such as defence, aerospace, finance, or healthcare
- Good working knowledge across IAM, cloud security, application security, and network security
- Experience implementing controls across hybrid environments
Advantageous
- Certifications such as CISSP, CISM, Azure Security, or specialist certifications in DLP or cryptography
- Exposure to OT/ICS or highly distributed environments
- Ability to communicate clearly with both technical teams and senior stakeholders
- Comfortable working independently and driving initiatives forward
Why This Role
This role offers the chance to take ownership of data security in an environment where the stakes are high and the systems are complex. The work spans modern cloud platforms, enterprise infrastructure, and advanced cryptographic services. You will play a key role in shaping how data is protected, with the opportunity to influence both strategy and implementation.
