Data Security Architect

In this role you will lead Crown’s global data-security strategy and DLP programme, shaping enterprise standards and controls. You will work within the Global Security Team to protect data across on-premises and cloud environments while supporting regulatory obligations. You will partner with IT, Legal, HR and business stakeholders to reduce data-exposure risk and drive secure data handling. This is a hands-on architecture and implementation role in a fast-moving, multinational context. You will influence security maturity and contribute to Crown’s sustainable packaging mission through robust data protection.

• safety of employees
• meaningful career development
• professional development through training
• work experiences
• inclusive culture

• Define and maintain a global data-security roadmap and policy framework
• Develop and implement technical controls for data protection, discovery, classification, encryption, and DLP
• Produce designs, data flows, and implementation plans to ensure scalable security solutions
• Define metrics and reporting for coverage, effectiveness, and risk reduction
• Ensure alignment with zero-trust, privacy obligations, and regulatory requirements
• Lead technical implementation of data-security solutions and standard operating processes
• Act as SME for Crown’s data-security solutions and ensure ongoing compliance with standards
• Identify gaps and coordinate remediation with minimal operational impact
• Support integration with security monitoring, incident response, IAM, endpoint/security, cloud security, and governance
• Provide technical leadership and mentoring to Global Security and regional IT teams
• Assist with incident investigations, remediation, and lessons learned
• Collaborate with business and technical stakeholders to implement proportionate controls

• 7+ years in information security, security engineering, or related field
• 3+ years designing or managing enterprise-scale DLP and data-security capabilities
• Experience implementing and tuning DLP across endpoint, email, web, cloud storage, SaaS, and file-sharing
• Knowledge of data discovery, classification, labeling, information protection, encryption, rights management
• Experience defining and maintaining security standards, policies, and patterns in a large enterprise
• Working knowledge of Microsoft-based cloud/on-premises environment (Microsoft 365, Entra ID, Windows Server/Client OS, SharePoint, SQL, Azure)
• Architectural or technical lead experience on multi-country projects
• Familiarity with cybersecurity/privacy frameworks (NIST, ISO 27001/27701, MITRE ATT&CK) and GDPR

• Strategic thinking
• Detail-oriented and quality focus
• Strong organizational and prioritization abilities
• Data loss prevention (DLP)
• Data discovery and classification
• Data labeling and information protection