Data Management Lead

Portman Finance Group
Northampton, UK
5 days ago
Apply on www.collegerecruiter.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Compensation
£20,800.0 - £31,200.0
Working hours
Regular working hours

Tech stack

Cyber Security Data Control Data Governance Data Security Information Lifecycle Management Marketing Information Systems Phishing Data Storage Technologies Cybercrime Data Management

Job description

The Data Management Lead is responsible for overseeing and improving Portman’s data governance framework, data management controls and data security posture. This role will lead the data management group, review and challenge existing security and data controls, and be accountable for implementing agreed improvements across systems, processes, and suppliers.

The ideal candidate will act as a subject matter expert on data management including security and data risk, and be able to provide pragmatic, risk-based advice rather than theoretical guidance., * Review, assess, and continuously improve data security controls across systems, platforms, and suppliers

  • Ensure appropriate controls are in place for:
  • Data access and permissions
  • Data storage, transmission, and retention
  • Encryption, identity, and authentication
  • Maintain awareness of current cybersecurity threats and ensure controls reflect real-world attack vectors
  • Support incident response relating to data security events, breaches, or near misses
  • Lead the Data Management Group and take ownership of implementing agreed changes.
  • Own and maintain data management policies, standards, and control frameworks
  • Ensure alignment with UK GDPR, PECR, FCA expectations (where applicable), and internal risk frameworks
  • Provide clear reporting on data risks, control effectiveness, and remediation activity to senior stakeholders
  • Track remediation actions and ensure timely completion
  • Act as a point of escalation where data or security risks are not being adequately addressed
  • Support the identification, assessment, and procurement of third-party data sources
  • Ensure appropriate due diligence, contractual protections, and security controls are in place
  • Work with commercial teams to balance data opportunity with regulatory and security risk

Requirements

The role requires strong practical experience in data management including security and cybersecurity, combined with the ability to operate across technology, compliance, and marketing/commercial teams. A secondary responsibility of the role is to support the safe acquisition and use of third-party data, including prospecting and marketing datasets., * Typically 5+ years’ relevant experience in data management including data security, information security, or related roles, with demonstrable ownership of security and data control implementation.

  • Experience reviewing, designing, or improving data security controls across systems and platforms
  • Demonstrable experience implementing security or data control changes, not just defining policy
  • Strong understanding of the data lifecycle (collection, storage, use, sharing, retention, disposal)
  • Practical knowledge of common cyber threats (e.g. phishing, credential compromise, data exfiltration, insider risk) and appropriate mitigating controls
  • Experience assessing third-party risk, including suppliers, data providers, or technology partners
  • Strong working knowledge of UK GDPR, PECR and data protection principles, with experience applying them pragmatically
  • Ability to challenge technical and non-technical stakeholders on data and security risks
  • Strong stakeholder management skills, with experience working across Technical, Compliance, and Commercial teams
  • Experience producing clear risk reporting for senior management or governance groups
  • Experience in a regulated environment (e.g. financial services, professional services, regulated technology)
  • Hands-on cybersecurity background or close working relationship with security teams
  • Experience supporting or responding to security incidents involving data
  • Experience procuring or assessing third-party datasets, including prospecting or marketing data
  • Relevant certifications (e.g. CISSP, CISM, ISO 27001, or equivalent) - beneficial but not essential, * Excellent written and oral communications skills;
  • Ability to remain calm under pressure and meet deadlines;
  • Strong organisational skills with a high attention to detail;
  • Ability to prioritise and handle multiple tasks at any given time in a fast-paced environment;
  • Pro-active and enthusiastic with a can-do attitude;
  • Good commercial acumen; and
  • Ability to work on own initiative as well as being a team player.

Benefits & conditions

  • Competitive basic salary and annual bonus;
  • Vibrant, high-spec office environment;
  • Enhanced annual leave, increasing with length of service;
  • Salary sacrifice pension;
  • Quarterly all-staff events and dynamic culture

About the company

Portman Finance Group was established in 2007 to provide UK SMEs with access to a range of finance options under one roof. We have now arranged over £1.5 billion in funding for over 15,000 companies.

Portman secure finance for businesses of all sizes via our own lending and panel of over 40 partners. We offer flexible payment terms, reducing large initial outlays and protecting cash-flow, and are one of the largest privately owned Broker-Lenders in the UK.

Please note that as part of the recruitment process a criminal records check/credit history check will be carried out by an authorised third party. #J-18808-Ljbffr

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.collegerecruiter.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:29 min

Evaluating phishing emails that leverage artificial time constraints

Mauro Verderosa · LIVE

4:34 min

Motivational categories behind modern cybercriminal activities

Mauro Verderosa · LIVE

1:58 min

Uncovering team dynamics through version control data analysis

Adam Tornhill · Coffee With Developers

2:03 min

Platform compliance and security certifications for sensitive data

Chad Carlson · World Congress 2021

3:02 min

Navigating DORA compliance and executive liability in security

Michele Zuccala Michele Zuccala +4 · World Congress 2026 Europe

2:39 min

Exposing stored XSS and phishing attacks via markdown

Ramona Schwering Ramona Schwering · World Congress 2026 Europe

Videos

See all

Related articles

See all