Associate Principal Cyber Security Architect (Data)

About the role

Dyson is hiring an Associate Principal Cyber Security Architect for Data to lead its data security capabilities. The role focuses on Data Loss Prevention, data discovery and classification, and protecting structured and unstructured information across endpoints, collaboration services, email, SaaS, cloud platforms, databases and data platforms. It translates business, legal, privacy and security requirements into a coherent data protection architecture that balances strong protection of intellectual property and regulated information with a usable employee and engineering experience.

Key responsibilities

• Set the data security architecture direction, principles, target state and multi-year roadmap for data classification, DLP and protective controls.
• Define enterprise data classification and handling architecture, including levels, labelling, metadata, ownership, retention and integration with technical enforcement.
• Architect data discovery and classification across endpoints, file repositories, collaboration platforms, email, SaaS, cloud storage, databases and data platforms.
• Design risk-based DLP controls across endpoint, email, web, cloud and collaboration channels, covering data at rest, in use and in motion.
• Define patterns for encryption, key management, tokenisation, masking, rights management, access control and secure data sharing.
• Lead security architecture reviews and risk assessments, record decisions and residual risk, and partner with data owners, Data Governance, Privacy, Legal, HR, Insider Risk and technology teams.
• Integrate DLP and classification telemetry into monitoring, investigation and incident response, and build reusable security patterns for Microsoft 365, endpoints, SaaS, cloud platforms, data lakes and AI use cases.
• Establish Data Security Posture Management requirements, policy lifecycle governance and metrics for data-risk reduction.
• Guide product teams and suppliers, coach architects and engineers, and build standards, reference architectures, patterns and playbooks.

Required profile

• Significant experience in security architecture, data security or information protection, with accountability for complex enterprise-scale outcomes.
• Experience securing high-value intellectual property, source code, engineering data, customer information, employee data or regulated datasets.
• Ability to assess data flows, trust boundaries, identities, entitlements, storage locations, third parties and cross-border transfers.
• Strong communication, facilitation and influencing skills, able to lead through influence and coordinate virtual teams and external partners with limited supervision.
• Relevant certifications such as CISSP, ISSAP, CCSP, CISM, Microsoft security credentials or privacy and data-governance certifications are supported but do not replace practical capability.

Required skills

• Hands-on experience with enterprise information-protection and DLP platforms such as Microsoft Purview, FortiDLP or Netskope.
• Deep knowledge of DLP architecture, data discovery, classification and labelling, and data lifecycle risks.
• Knowledge of cloud, SaaS, endpoint and collaboration architectures, and of Data Security Posture Management.
• Experience connecting data-security controls to SIEM, case management, incident response and insider-risk workflows.
• Experience designing data controls for analytics, machine learning and generative AI.