Data Security Architect

About the role

The Data Security Architect will lead the strategy, architecture, implementation and continuous improvement of Crown’s global data-security and Data Loss Prevention (DLP) programme. Operating within the Global Security Team, the role combines strategic architecture capability with strong hands-on technical expertise to establish enterprise standards and processes for discovering, classifying, protecting, and governing sensitive information across the enterprise, both on-premises and in the cloud. Partnering with Regional IT, Legal, HR and business stakeholders, they will define and support the implementation of controls to reduce the risk of inappropriate access, disclosure, loss, or exfiltration of Crown data.

Location: Yardley, PA (USA) or Wantage (UK). This is an office-based position with daily on-site expectation; Crown offers a flexible work hour schedule.

Responsibilities

Strategy and Architecture Design (40%)

• Define and maintain a comprehensive global data-security roadmap
• Continuously develop policies, standards and technical controls to protect Crown’s sensitive data, including intellectual property, financial information, personal data and other business-critical information
• Identify, assess and select global data-security technologies and capabilities, including DLP, data discovery, data classification, information protection, encryption and data security posture management solutions
• Produce detailed technical designs, data flows, policy frameworks, implementation plans, and operational processes to ensure data-security solutions are resilient, scalable, and fit for Crown’s global environment
• Define metrics and reporting to measure technology and policy coverage and effectiveness, incident trends, control maturity, and data-related risk reduction
• Ensure data-security architecture aligns with Crown’s wider security strategy, zero-trust principles, privacy obligations, and applicable regulatory requirements

Implementation & Technical Leadership (40%)

• Serve as the lead technical resource throughout the implementation of new data security solutions and changes, including defining standard processes and authoring detailed documentation to allow smooth transition to an operational state
• Function as the subject matter expert for Crown’s data-security related solutions, ensuring they are managed and maintained to Crown and industry standards and meet current and future requirements
• Proactively identify data-security gaps, policy violations, insecure configurations and data-exposure risks across the enterprise and help coordinate efficient remediation with minimal operational impact
• Support the integration of data-security capabilities with security monitoring, incident response, identity and access management, endpoint security, cloud security, and governance processes
• Provide technical leadership, mentoring, and guidance to the rest of the Global Security Team and the Regional IT teams supporting the global DLP programme

Stakeholder Collaboration and Consulting (20%)

• Assist with the investigation, prioritisation, remediation, and lessons learned from data-security incidents, working closely with Security Operations, Legal, HR, Regional IT teams and Executive Leadership as required
• Work with business and technical stakeholders to understand data use cases and implement proportionate controls that protect sensitive data without unnecessarily disrupting business operations
• Partner with Regional IT, Legal, IP, HR and other business unit stakeholders to ensure data-security controls support business requirements and meet applicable regulatory obligations
• Provide technical guidance in other projects and activities to ensure that data-related components, processes, and solutions are designed and configured in line with Crown security standards

Requirements

Technical Expertise

• 7+ years of hands-on experience in information security, security engineering, security architecture, or a closely related discipline
• 3+ years of experience designing & implementing and/or managing enterprise-scale Data Loss Prevention and data-security capabilities
• Proven experience implementing and tuning DLP controls across multiple channels, such as endpoint, email, web, cloud storage, collaboration platforms, SaaS applications, and file-sharing services
• Strong technical knowledge of data discovery, data classification, data labelling, information protection, encryption, rights management, and secure data-sharing technologies
• Demonstrated success reducing data-security risk by identifying and remediating misconfigurations, inappropriate data-sharing practices and control gaps
• Proven history of defining and maintaining security standards, policies, processes, and technical patterns within a large corporate environment
• Working knowledge of a Microsoft-based cloud and on-premises enterprise environment running Microsoft 365, Entra ID, Windows Server/Client OS, SharePoint, SQL and Azure technologies
• Operated as an architect or technical lead on complex projects spanning multiple countries, business units, and cultures
• Working knowledge of cybersecurity or privacy frameworks, such as NIST, ISO 27001/27701, MITRE ATT&CK, or comparable methodologies
• Familiarity with relevant data-protection regulations and requirements, including GDPR and other applicable regional privacy obligations

Core Competencies

• Strategic thinker; understands complex business needs and translates them into secure, technically sound, actionable plans
• Quality driven and detail oriented, with advanced problem solving and troubleshooting skills
• Strong organizational and prioritization skills; effectively manages competing tasks and consistently meets project deadlines
• Excellent communication skills; translates technical concepts for diverse audiences and influences technical stakeholders through evidence-based recommendations
• Proactive and self-directed; anticipates risks, identifies opportunities for improvement, and takes timely action to resolve issues before they affect delivery or security outcomes
• Personable and relationship-focused; builds trusted, productive working relationships across teams, stakeholders, countries, and cultures to enable effective collaboration and shared outcomes

Qualifications (Preferred)

• Bachelor’s degree in Information Systems, Computer Science, or equivalent experience
• Certifications such as CISSP, CISM, CCSP, CRISC, IAPP CIPP/E, CIPM, Microsoft SC-400 or other relevant vendor certifications in cyber/data security are desirable
• TOGAF would also be desirable

Benefits

• Strong engagement and commitment to the safety of our employees
• The opportunity to build a meaningful career
• Professional and personal development through training and work experiences

Company Culture

Working Together is one of the five pillars that make up our Twentyby30™ program. We aim to value and respect each individual and foster an environment of inclusivity.