Data Management Lead

Data Management Lead | Onsite | Northampton NN4 Competitive Salary + 10-15% Annual Bonus

The Data Management Lead is responsible for overseeing and improving Portman’s data governance framework, data management controls and data security posture. This role will lead the data management group, review and challenge existing security and data controls, and be accountable for implementing agreed improvements across systems, processes, and suppliers.

The ideal candidate will act as a subject matter expert on data management including security and data risk, and be able to provide pragmatic, risk-based advice rather than theoretical guidance.

The role requires strong practical experience in data management including security and cybersecurity, combined with the ability to operate across technology, compliance, and marketing/commercial teams. A secondary responsibility of the role is to support the safe acquisition and use of third‑party data, including prospecting and marketing datasets.

• Review, assess, and continuously improve data security controls across systems, platforms, and suppliers
• Ensure appropriate controls are in place for:
• Data access and permissions
• Data storage, transmission, and retention
• Encryption, identity, and authentication
• Maintain awareness of current cybersecurity threats and ensure controls reflect real-world attack vectors
• Support incident response relating to data security events, breaches, or near misses
• Lead the Data Management Group and take ownership of implementing agreed changes.
• Own and maintain data management policies, standards, and control frameworks
• Ensure alignment with UK GDPR, PECR, FCA expectations (where applicable), and internal risk frameworks
• Provide clear reporting on data risks, control effectiveness, and remediation activity to senior stakeholders
• Track remediation actions and ensure timely completion
• Act as a point of escalation where data or security risks are not being adequately addressed
• Support the identification, assessment, and procurement of third‑party data sources
• Ensure appropriate due diligence, contractual protections, and security controls are in place
• Work with commercial teams to balance data opportunity with regulatory and security risk

• Typically 5+ years’ relevant experience in data management including data security, information security, or related roles, with demonstrable ownership of security and data control implementation.
• Experience reviewing, designing, or improving data security controls across systems and platforms
• Demonstrable experience implementing security or data control changes, not just defining policy
• Strong understanding of the data lifecycle (collection, storage, use, sharing, retention, disposal)
• Practical knowledge of common cyber threats (e.g. phishing, credential compromise, data exfiltration, insider risk) and appropriate mitigating controls
• Experience assessing third‑party risk, including suppliers, data providers, or technology partners
• Strong working knowledge of UK GDPR, PECR and data protection principles, with experience applying them pragmatically
• Ability to challenge technical and non‑technical stakeholders on data and security risks
• Strong stakeholder management skills, with experience working across Technical, Compliance, and Commercial teams
• Experience producing clear risk reporting for senior management or governance groups
• Experience in a regulated environment (e.g. financial services, professional services, regulated technology)
• Hands‑on cybersecurity background or close working relationship with security teams
• Experience supporting or responding to security incidents involving data
• Experience procuring or assessing third‑party datasets, including prospecting or marketing data
• Relevant certifications (e.g. CISSP, CISM, ISO 27001, or equivalent) - beneficial but not essential

• Excellent written and oral communications skills;
• Ability to remain calm under pressure and meet deadlines;
• Strong organisational skills with a high attention to detail;
• Ability to prioritise and handle multiple tasks at any given time in a fast‑paced environment;
• Pro‑active and…