Cyber Security Architect - Data Security (Outside IR35, Insurance & Health)

Location: Remote (~1 day per month in London) Rate: Competitive day rate Duration: Initial 4 month contract (extendable)

We are a leading consultancy supporting a major health insurance organisation on a critical data security programme. We're seeking a Cyber Security Architect with deep expertise in Data Security to define and deliver secure architectures for highly confidential data.

This is a hands-on role focused on shaping target state architectures, building data protection roadmaps, and embedding secure design across complex, data-centric environments.

Key Responsibilities

• Define and deliver end-to-end Data Security Architecture aligned to business and regulatory requirements.
• Establish security principles, patterns, and guardrails across structured, unstructured, and cloud data environments.
• Design solutions across data classification, DLP, encryption, tokenisation, key management, and access governance.
• Develop and drive data security roadmaps from current to target state.
• Lead data-focused threat modelling and define pragmatic mitigation strategies.
• Provide architectural oversight and assurance across key data platforms and initiatives.
• Collaborate with engineering, cloud, and risk teams to embed secure-by-design principles.
• Communicate risks, trade-offs, and solutions clearly to senior stakeholders.

Experience Required

• Proven Cyber Security Architect/Data Security Architect experience within complex environments.
• Strong expertise in data security controls and cloud platforms (Azure, AWS, GCP).
• Hands-on experience with DLP, encryption, tokenisation, and IAM/PAM/CIEM.
• Experience delivering data security roadmaps and threat modelling for highly sensitive data.
• Solid understanding of GDPR, ISO27001, NIST, PCI-DSS.
• Strong stakeholder engagement and communication skills.
• CISSP, CCSP, TOGAF, or SABSA desirable.

• Proven Cyber Security Architect/Data Security Architect experience within complex environments.
• Strong expertise in data security controls and cloud platforms (Azure, AWS, GCP).
• Hands-on experience with DLP, encryption, tokenisation, and IAM/PAM/CIEM.
• Experience delivering data security roadmaps and threat modelling for highly sensitive data.
• Solid understanding of GDPR, ISO27001, NIST, PCI-DSS.
• Strong stakeholder engagement and communication skills.
• CISSP, CCSP, TOGAF, or SABSA desirable.