Lead Security Engineer, Data

CFC

. Design, implement and operate data discovery, classification and loss-prevention controls across CFC's stores, and record coverage in the control register.

Posted 10/12/2026full-timeLondon • United KingdomSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing data privacy and security architectures, with a focus on automation and compliance. Proven ability to lead investigations and design controls that prevent data loss and insider threats while maintaining chain of custody.

Highest-signal resume keywords

Data Privacy ArchitectureData Loss PreventionIncident InvestigationAutomation of Security ControlsCross-Functional Collaboration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data ClassificationEncryptionData DisposalMonitoring ControlsSandboxingPolicy AutomationTechnical JudgementAccess ManagementEvidence CollectionChain of Custody

Soft Skills

Influencing TeamsClear CommunicationDiscretion

Tools & Technologies

Generative AI ToolsWorkflow Automation

Industry Keywords

Data ProtectionSecurity ArchitectureComplianceRisk ManagementPrivacy Standards

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Design, implement and operate data discovery, classification and loss-prevention controls across CFC's stores, and record coverage in the control register.
Create reusable patterns for encryption, masking and secure disposal, and publish them as standards for new systems.
Implement data-loss-prevention policy-as-code for email, endpoints and cloud stores, and record the test results for each rule change.
Diagnose insider and data-loss incidents to root cause, implement controls to prevent recurrence, and document them in incident reports.
Preserve and prepare digital evidence for insider, data-loss and sensitive investigations, maintaining chain of custody and applying recognised digital evidence principles.
Lead cross-functional data-protection design reviews for new products and record decisions as standards.
Design technical guardrails for data handling, including generative AI tools, and publish the guardrail catalogue in the standard.
Build security metrics for classification coverage, loss-prevention events and encryption of sensitive stores, and publish them to data owners.
Advise the security function on data-protection exceptions and record each decision in the risk register.
Lead cross-functional data privacy and security design and threat-modelling activities, translating identified risks into layered, prioritised engineering improvements.
Design and implement automation for privacy and security policies and guardrails across workflows and endpoints, including use of AI augmentation.
Serve as the technical authority on data privacy and security, advising teams on complex privacy and security architecture and right-sizing controls.

Requirements

What you’ll need

Deep experience designing and engineering privacy and security for a fast-moving technology forward organisation.
Experience designing classification, loss prevention, sandboxing, monitoring, encryption, disposal and reporting controls that other teams can apply.
A record of data-loss or insider investigations closed with a control that stopped the same failure returning.
Experience handling sensitive investigations with appropriate discretion, including evidence collection, chain of custody and close working with HR, Legal and other authorised stakeholders.
Experience designing access and permissions for both human and non-humans to production data and addressing privacy and security weaknesses.
Ability to create privacy and security architectures and navigate trade-offs between compliance, security, accessibility, decentralisation and performance.
Ability to automate privacy and security controls through code, policy and workflow automation.
Strong technical judgement and the ability to influence cross-functional teams through clear architectural reasoning.

Benefits

Comp & perks

Love what you do: We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.
Challenge everything: We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.
Have fun, be good: Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.