Designs and operates data-protection controls across systems, products, endpoints, email, and cloud stores. Responsibilities include data discovery and classification, loss prevention, encryption, masking, secure disposal, privacy automation, threat modeling, incident investigation, digital evidence handling, and security metrics. The role serves as a technical authority, leading cross-functional privacy and security reviews and translating risks into reusable engineering controls, standards, guardrails, and policy automation.
At CFC, technology is at the heart of everything we do. We are looking for a Lead Security Engineer (Data) to design and deliver data protection across CFC's systems, products and ways of working. This is an individual contributor leader role for an engineer who solves complex, cross-functional problems and turns security and privacy requirements into effective technical controls.
You will work with engineering, data, privacy and the business to create reusable patterns, policy-as-code, implement and automate controls, diagnose weaknesses and ensure data protection remains effective as our technology environment evolves.
About the role
In this role, you will:
- Design, implement and operate data discovery, classification and loss-prevention controls across CFC's stores, and record coverage in the control register.
- Create reusable patterns for encryption, masking and secure disposal, and publish them as standards for new systems.
- Implement data-loss-prevention policy-as-code for email, endpoints and cloud stores, and record the test results for each rule change.
- Diagnose insider and data-loss incidents to root cause, implement the control to prevent recurrence, and document both in the incident report.
- Preserve and prepare digital evidence for insider, data-loss and sensitive investigations, maintaining chain of custody and applying recognised digital evidence principles.
- Lead cross-functional data-protection design reviews for new products and record the decisions as standards.
- Design technical guardrails for data handling, including generative AI tools, and publish the guardrail catalogue in the standard.
- Build security metrics for classification coverage, loss-prevention events and encryption of sensitive stores, and publish them to data owners.
- Advise the security function on data-protection exceptions and record each decision in the risk register.
- Lead cross-functional data privacy and security design and threat-modelling activities, translating identified risks into layered, prioritised engineering improvements.
- Design and implement automation for privacy and security policies and guardrails across workflows and endpoints, including use of AI augmentation.
- Be the technical authority on data privacy and security, advising teams on complex privacy and security architecture and right-sizing controls.
About you
You'll likely bring:
- Deep experience designing and engineering privacy and security for a fast-moving technology forward organisation.
- Experience designing classification, loss prevention, sandboxing, monitoring, encryption, disposal and reporting controls that other teams can apply
- A record of data-loss or insider investigations closed with a control that stopped the same failure returning.
- Experience handling sensitive investigations with appropriate discretion, including evidence collection, chain of custody and close working with HR, Legal and other authorised stakeholders.
- Experience designing access and permissions for both human and non-humans to production data and addressing privacy and security weaknesses.
- Ability to create privacy and security architectures and navigate trade-offs between compliance, security, accessibility, decentralisation and performance.
- Ability to automate privacy and security controls through code, policy and workflow automation.
- Strong technical judgement and the ability to influence cross-functional teams through clear architectural reasoning.
Core Values
Love what you do:
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.
Challenge everything:
We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.
Have fun, be good:
Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.
Challenge everything:
We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.
Have fun, be good:
Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.
About
CFC is a specialist insurance provider, pioneering emerging risk and market leader in cyber. Our global insurance platform uses cutting-edge technology and data science to deliver smarter, faster underwriting and protect customers from today's most critical business risk.Headquartered in London with offices in New York, Melbourne, Sydney, Austin, Madrid, Brussels and Brisbane, CFC has over 1200 staff and is trusted by more than 100,000 businesses across 90 countries.At CFC, insurance isn't just about underwriting. From data science to software development, and digital marketing design, we've got something for everyone. We're passionate about pushing boundaries, thinking differently and building the insurance company of the future.CFC is committed to the principles of equal opportunities and creating an environment in which all individuals are always treated with dignity and respect. We encourage a diverse corporate culture of openness and appreciation to create an environment in which your talent can be developed in the best possible way. Should you require any reasonable adjustments at any stage of the recruitment process please let us know.Feeling like you need to tick every box before applying? We see things differently. In a rapidly scaling company like ours, ambition and the drive to learn count for more than a 'perfect' checklist. We're building the future of insurance, and that requires diverse talent eager to grow with us. If this role excites you and you're ready to make a significant impact, bring your unique background and let's build something great together.
CFC London, England Office
London, United Kingdom
Similar Jobs
Aerospace • Information Technology • Software • Cybersecurity • Design • Defense • Manufacturing
Two-year rotational engineering graduate programme with four six-month placements across Boeing UK locations, plus non-rotational roles. Graduates may work in systems, mission, industrial, quality, structures, testing, service, support, training, assurance, or experimentation engineering. The programme includes live projects, mentoring, professional development, theoretical learning, and exposure to multiple Boeing functions and locations.
Top Skills:
Engineering AnalysisEngineering DrawingsModel-Based Systems EngineeringModelling And SimulationSynthetic Training EquipmentTechnical Documentation
Aerospace • Information Technology • Software • Cybersecurity • Design • Defense • Manufacturing
Supervise aircraft technicians performing maintenance, repairs, modifications, troubleshooting, and component replacement within an MRO organization. Plan and distribute technical work, ensure accurate documentation and regulatory compliance, mentor technicians and apprentices, manage risks, and maintain delivery schedules. The role requires knowledge of aircraft maintenance processes, MAA regulatory requirements, aviation quality assurance, safety management systems, and technical publications. Candidates must obtain UK Security Clearance and may need aircraft-type supervisory and independent inspection authorizations.
Top Skills:
Aviation Quality AssuranceCoshhMaa Mrp Part 145Maa Regulatory ArticlesMS OfficeSafety Management Systems
Aerospace • Information Technology • Software • Cybersecurity • Design • Defense • Manufacturing
Develop, integrate, test, debug, document, and validate software models simulating aircraft systems. The role supports flight simulator qualification, local training-device integration, software processes, test procedures, and acceptance activities. Candidates will interpret engineering, mathematics, and physics concepts, implement algorithms in C/C++, collaborate within agile teams, and communicate technical information effectively.
Top Skills:
AgileCC++Linux
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
