Data Security Lead

Company: Arup
Apply for the Data Security Lead
Location: London
Job Description:

Overview

As the Data Security Service Lead, you will stand up Arup’s data security service, shaping its vision, operating model and roadmap. You’ll build the team, establish governance, and partner across Cyber to embed data protection into how the firm operates. You own data security outcomes with a plan that delivers ongoing, value-driven protection across the data lifecycle. You translate strategy into prioritized delivery, balancing governance, classification, DLP, encryption, monitoring and resilience. You’ll collaborate with senior stakeholders and technical teams to turn strategy into measurable impact.

Pay / Benefits

  • profit share
  • private medical insurance
  • Life assurance
  • Accident insurance
  • Income protection
  • flexible benefits

Responsibilities

  • Own and deliver the Data Security Service, including vision, roadmap, operating model and success measures
  • Translate the Data Security Plan into a clear, multi-year delivery roadmap covering governance, classification, DLP, encryption, monitoring and resilience
  • Lead strategic initiatives while delivering practical, operational outcomes
  • Collaborate with senior stakeholders and technical teams to turn data security strategies into tangible outcomes
  • Advise on complex data risks and track progress to continuously improve data protection across the lifecycle
  • Stand up and mature Arup’s new Data Security service with clear governance and accountability

Key requirements

  • Deep expertise in data security, including data classification, DLP, encryption and data lifecycle protection
  • Solid understanding of standards/frameworks (ISO/IEC 27001, NIST CSF, CIS Controls)
  • Proven experience owning or leading a global or enterprise-scale security service
  • Ability to operate effectively at both strategic and operational levels
  • Strong stakeholder management with experience influencing senior leaders and technical teams
  • stakeholder management
  • influencing at senior levels
  • strategic thinking
  • data classification
  • DLP
  • encryption

…

Posted: October 1st, 2026