Lead Security Engineer (Data)

CFC Underwriting Limited

Salary undisclosed

UK - LondonFull-timeHybridIntermediate

Need a reasonable accommodation to apply or interview? Contact us.

JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.

Description

At CFC, technology is at the heart of everything we do. We are looking for a Lead Security Engineer (Data) to design and deliver data protection across CFC's systems, products and ways of working. This is an individual contributor leader role for an engineer who solves complex, cross-functional problems and turns security and privacy requirements into effective technical controls.

You will work with engineering, data, privacy and the business to create reusable patterns, policy-as-code, implement and automate controls, diagnose weaknesses and ensure data protection remains effective as our technology environment evolves.

Key Responsibilities

In this role, you will:

Design, implement and operate data discovery, classification and loss-prevention controls across CFC's stores, and record coverage in the control register.
Create reusable patterns for encryption, masking and secure disposal, and publish them as standards for new systems.
Implement data-loss-prevention policy-as-code for email, endpoints and cloud stores, and record the test results for each rule change.
Diagnose insider and data-loss incidents to root cause, implement the control to prevent recurrence, and document both in the incident report.
Preserve and prepare digital evidence for insider, data-loss and sensitive investigations, maintaining chain of custody and applying recognised digital evidence principles.
Lead cross-functional data-protection design reviews for new products and record the decisions as standards.
Design technical guardrails for data handling, including generative AI tools, and publish the guardrail catalogue in the standard.
Build security metrics for classification coverage, loss-prevention events and encryption of sensitive stores, and publish them to data owners.
Advise the security function on data-protection exceptions and record each decision in the risk register.
Lead cross-functional data privacy and security design and threat-modelling activities, translating identified risks into layered, prioritised engineering improvements.
Design and implement automation for privacy and security policies and guardrails across workflows and endpoints, including use of AI augmentation.
Be the technical authority on data privacy and security, advising teams on complex privacy and security architecture and right-sizing controls.

Skills, Knowledge and Expertise

You'll likely bring:

Deep experience designing and engineering privacy and security for a fast-moving technology forward organisation.
Experience designing classification, loss prevention, sandboxing, monitoring, encryption, disposal and reporting controls that other teams can apply
A record of data-loss or insider investigations closed with a control that stopped the same failure returning.
Experience handling sensitive investigations with appropriate discretion, including evidence collection, chain of custody and close working with HR, Legal and other authorised stakeholders.
Experience designing access and permissions for both human and non-humans to production data and addressing privacy and security weaknesses.
Ability to create privacy and security architectures and navigate trade-offs between compliance, security, accessibility, decentralisation and performance.
Ability to automate privacy and security controls through code, policy and workflow automation.
Strong technical judgement and the ability to influence cross-functional teams through clear architectural reasoning.

Benefits

Love what you do:
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.

Challenge everything:
We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.

Have fun, be good:
Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.

Benefits

Love what you do: We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers. Challenge everything: We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better. Have fun, be good: Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.

See all jobs in London

About this role

CFC is seeking a Lead Security Engineer (Data) to own data protection across its technology environment—a role that sits at the intersection of engineering, privacy, and business strategy. You'll design and implement the full spectrum of data controls: classification and discovery systems, encryption and masking standards, loss-prevention policies, and automation frameworks that other teams can adopt. This is hands-on technical work; you'll diagnose real incidents to root cause, conduct threat modeling for new products, and build the metrics and guardrails that keep data safe as the organization scales, including emerging risks like generative AI.

The ideal candidate has deep experience architecting privacy and security controls in fast-moving tech environments, with a track record of closing data-loss or insider investigations by implementing controls that prevent recurrence. You should be comfortable designing access models for both human and non-human actors, handling sensitive investigations with discretion, and automating controls through code and policy. This role demands strong technical judgment and the ability to influence cross-functional teams—translating complex privacy and security requirements into clear, layered engineering improvements that balance compliance, performance, and accessibility.

Based in London on a hybrid arrangement, this is a full-time individual contributor leadership position where you'll be the technical authority on data privacy and security for the organization.

This role's local market on JobMinglr

Pay for this role

The employer didn't post a pay range for this role. That usually means pay is set in negotiation, which favors whoever arrives with numbers. Check ranges on comparable Lead Security Engineer (Data) postings in London, and analyze any offer before you accept it.

Before you apply, worth reading

How JobMinglr reads this job

Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.