Data Security Architect

Crown

. Lead the strategy, architecture, implementation, and continuous improvement of Crown’s global data-security and Data Loss Prevention programme .

Posted 10/23/2026full-timeYardley • Pennsylvania • United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in leading data-security strategies and implementing Data Loss Prevention solutions while ensuring compliance with regulatory requirements. Possesses strong technical knowledge in data protection technologies and the ability to translate complex security needs into actionable plans.

Highest-signal resume keywords

Data Loss Prevention ImplementationData Security ArchitectureInformation Protection TechnologiesCybersecurity Frameworks KnowledgeTechnical Leadership and Mentoring

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecuritySecurity EngineeringData DiscoveryData ClassificationEncryptionData Security Posture ManagementTechnical DesignPolicy DevelopmentRisk ReductionIncident Response

Soft Skills

Strategic ThinkingProblem-SolvingOrganizational SkillsCommunication SkillsRelationship-Focused Approach

Tools & Technologies

Microsoft 365Entra IDWindows ServerSharePointSQLAzureSaaS ApplicationsCollaboration PlatformsFile-Sharing ServicesEndpoint Security

Certifications & Qualifications

CISSPCISMCCSPCRISCIAPP CIPP/ECIPMMicrosoft SC-400TOGAF

Industry Keywords

Data SecurityZero-Trust PrinciplesGDPRNISTISO 27001ISO 27701MITRE ATT&CKPrivacy ObligationsTechnical ControlsPolicy Frameworks

Tech Stack

Tools & technologies

AzureCloudCyber SecuritySQL

About the role

Key responsibilities & impact

Lead the strategy, architecture, implementation, and continuous improvement of Crown’s global data-security and Data Loss Prevention programme
Define and maintain a comprehensive global data-security roadmap
Develop policies, standards, and technical controls to protect sensitive data
Identify, assess, and select data-security technologies including DLP, data discovery, data classification, information protection, encryption, and data security posture management solutions
Produce technical designs, data flows, policy frameworks, implementation plans, and operational processes
Define metrics and reporting for technology and policy coverage, effectiveness, incident trends, control maturity, and risk reduction
Ensure data-security architecture aligns with security strategy, zero-trust principles, privacy obligations, and regulatory requirements
Lead implementation of new data-security solutions and changes
Serve as subject matter expert for data-security solutions
Identify data-security gaps, policy violations, insecure configurations, and data-exposure risks and coordinate remediation
Integrate data-security capabilities with security monitoring, incident response, identity and access management, endpoint security, cloud security, and governance processes
Provide technical leadership, mentoring, and guidance to Global Security and Regional IT teams
Assist with investigation, prioritization, remediation, and lessons learned from data-security incidents
Work with business and technical stakeholders to implement proportionate controls
Partner with Regional IT, Legal, IP, HR, and business-unit stakeholders to meet business and regulatory requirements
Provide technical guidance on projects to ensure data-related components align with Crown security standards

Requirements

What you’ll need

7+ years of hands-on experience in information security, security engineering, security architecture, or a closely related discipline
3+ years of experience designing and implementing and/or managing enterprise-scale Data Loss Prevention and data-security capabilities
Proven experience implementing and tuning DLP controls across endpoint, email, web, cloud storage, collaboration platforms, SaaS applications, and file-sharing services
Strong technical knowledge of data discovery, data classification, data labelling, information protection, encryption, rights management, and secure data-sharing technologies
Demonstrated success reducing data-security risk by identifying and remediating misconfigurations, inappropriate data-sharing practices, and control gaps
Proven history of defining and maintaining security standards, policies, processes, and technical patterns within a large corporate environment
Working knowledge of Microsoft 365, Entra ID, Windows Server/Client OS, SharePoint, SQL, and Azure technologies
Experience operating as an architect or technical lead on complex projects spanning multiple countries, business units, and cultures
Working knowledge of cybersecurity or privacy frameworks such as NIST, ISO 27001/27701, and MITRE ATT&CK
Familiarity with GDPR and other applicable regional privacy obligations
Strategic thinking and ability to translate complex business needs into secure, technically sound, actionable plans
Advanced problem-solving and troubleshooting skills
Strong organizational and prioritization skills
Excellent communication skills and ability to translate technical concepts for diverse audiences
Proactive, self-directed, personable, and relationship-focused approach
Bachelor’s degree in Information Systems, Computer Science, or equivalent experience is preferred
Certifications such as CISSP, CISM, CCSP, CRISC, IAPP CIPP/E, CIPM, Microsoft SC-400, or other relevant vendor certifications are desirable
TOGAF certification is desirable

Benefits

Comp & perks

Flexible work hour schedule
Professional and personal development through training and work experiences
Strong engagement and commitment to the safety of employees
Opportunity to build a meaningful career
Inclusive environment that values and respects each individual