Data Management & Security Lead

Proximity Recruitment are looking for a Data Management & Security Lead to take ownership of data governance, security and risk across a complex, fast-moving organisation in Northampton.

This is a hands-on leadership role for someone who knows how data really behaves in the wild, across systems, suppliers and teams, and can turn good intentions into controls that actually work. You’ll lead a small data management function, challenge existing practices, and drive practical improvements that reduce risk without slowing the business down.

You’ll act as the go-to expert on data management and data security, providing clear, risk-based advice rather than theory. A key part of the role is working across technology, compliance and commercial teams to ensure data is used safely, legally and effectively, including the acquisition and use of third-party and marketing data.

Responsibilities include:

• Reviewing and strengthening data security controls across systems, platforms and suppliers.
• Making sure controls around access, permissions, storage, transmission, retention, encryption and authentication are fit for purpose.
• Keeping on top of real-world cyber threats and ensuring controls reflect how attacks actually happen.
• Supporting incident response for data security events, breaches or near misses.
• Leading the data management group and owning delivery of agreed changes.
• Owning data management policies, standards and control frameworks.
• Ensuring alignment with UK GDPR, PECR and relevant regulatory expectations.
• Reporting clearly on data risks, control effectiveness and remediation to senior stakeholders.
• Tracking remediation actions and escalating issues where risks aren’t being addressed.
• Supporting the assessment and procurement of third-party data sources.
• Ensuring appropriate due diligence, contracts and security controls are in place.
• Working with commercial teams to balance opportunity with regulatory and security risk.

Experience Needed:

• Around 5+ years’ experience in data management, data security or information security roles
• Proven experience implementing security or data control improvements, not just writing policy
• Strong understanding of the full data lifecycle, from collection to disposal
• Practical knowledge of common cyber threats and how to mitigate them
• Experience assessing and managing third-party and supplier risk
• Solid working knowledge of UK GDPR and PECR, applied pragmatically
• Confidence challenging both technical and non-technical stakeholders
• Experience working across technology, compliance and commercial teams
• Ability to produce clear, meaningful risk reporting for senior audiences

Additional Experience:

• Experience in a regulated environment
• Hands-on cybersecurity background or close collaboration with security teams
• Experience supporting or responding to data-related security incidents
• Experience assessing or procuring third-party or marketing datasets
• Relevant certifications such as CISSP, CISM or ISO 27001 (helpful, not essential)

You’ll thrive in this role if you’re calm under pressure, commercially aware, detail-focused and proactive. We are looking for someone who can take ownership, move things forward, and build trust across the business. The role is 3 days a week in the offices in Northampton.