HEAD OF DATA SECURITY - LONDON - UK ONLY
Key Responsibilities:
1. Define and drive the enterprise-wide data protection strategy, ensuring robust safeguards for sensitive information across cloud services, applications, and endpoints.
2. Develop and mature the organisation’s DLP operating model, including policy frameworks, rule sets, alerting thresholds, and continuous monitoring enhancements.
3. Implement strongernance for data classification, handling, retention, and encryption, ensuring secure management of data throughout its lifecycle.
4. Lead the organisation’s strategic direction on quantum ‑ resilient security, including assessments of quantum-related risks and the creation of a staged readiness plan.
5. Assess, rmend, and oversee the rollout of advanced cryptographic technologies, ensuring alignment with evolving standards and business risk appetite.
6. Embed secure data practices across projects and platforms, working collaboratively with Architecture, Technology, Risk, Legal, andpliance to ensure security is built in from the outset.
7. Stay ahead of emerging data security and cryptography threats, continuously scanning the external environment for new risks and regulatory drivers.
8. Act as escalation point for data protection incidents, providing expert advice on containment, investigation, and lessons learned.
9. Manage relationships with specialist vendors, consultancies, and technology partners, ensuring solutions deliver value and meet security expectations.
Performance Objectives
10. Deliver a coherent organisational strategy for data protection and DLP, with clear controls,ernance structures, and reporting mechanisms.
11. Reduce data ‑ exfiltration and insider ‑ risk exposures, supported by quantifiable improvements in control effectiveness and risk visibility.
12. Produce a credible, risk ‑ aligned post ‑ quantum cryptography roadmap, addressing future ‑ proofing, migration planning, and regulatory readiness.
Skills and Experience Specification
Essential
13. Extensive leadership experience in data security, information security, or cybersecurity, ideally within large orplex organisations.
14. Deep technical knowledge of DLP tooling, data classification models, encryption technologies, and secure data lifecycle controls.
15. Strong grounding in cryptographic fundamentals, key management schemes, and secure system design.
16. Demonstrable experience deploying enterprise-grade DLP solutions across hybrid cloud, on ‑ premises, and endpoint ecosystems.
17. Ability to convertplex technical risks into clear strategic insights for senior executives and board ‑ level stakeholders.
18. Proven capability in cross-functional collaboration, engaging effectively with technology, business, risk, andpliance teams.
19. Professional security certifications such as CISSP, CISM, CCSP, or cryptography ‑ specific accreditations.
20. Awareness of evolving cryptographic and security guidance, including NIST post ‑ quantum cryptography standards.
Desirable
21. Hands ‑ on experience with quantum ‑ safe cryptography, cryptographic agility programmes, or emerging quantum ‑ resilient security solutions.
22. Background in highly regulated sectors such as financial services, insurance, or healthcare.
23. Experience leading data security incident response, breach investigations, orplex data ‑ related forensics.
#4768941 - James Francis