Data Security Architect at Crown in Yardley, PA

Job description

About Crown Crown Holdings, Inc. through it's subsidiaries, is a world leader in the metal packaging production process. We design and manufacture a wide range of innovative and sustainable metal packaging solutions and products. Our clients are some of the largest and most respected companies in the world. Crown is dedicated to building a team of highly talented, dedicated, and driven individuals. It's an exciting time to join our business because Crown offers you the opportunity to grow and develop your skills in an expanding industry. Crown was founded with the goal of valuing and promoting sustainability and this vision continues to be essential to our long-term future. Job Description: The Global Information Security Team’s mission is to protect Crown’s global information systems, data and employees from cyber-based security threats while ensuring the confidentiality, integrity and availability of information used by the Crown business units to produce world class sustainable packaging solutions to our customers. You will join a collaborative, supportive, and high-performing team who love what they do and are committed to creating a safe and secure environment for the Crown family. Our team is nimble, lean and made up of individuals with dynamic backgrounds that foster an environment of continuous learning and growth. Yardley, PA (USA) or Wantage (UK). This is an office-based position, and individuals are expected to be in the office daily. Crown offers a flexible work hour schedule. About the Position The Data Security Architect will lead the strategy, architecture, implementation and continuous improvement of Crown’s global data-security and Data Loss Prevention (DLP) program. Operating within the Global Security Team, the role combines strategic architecture capability with strong hands-on technical expertise to establish enterprise standards and processes for discovering, classifying, protecting, and governing sensitive information across the enterprise, both on-premises and in the cloud. Partnering with the Regional IT, Legal, HR and business stakeholders, they will define and support the implementation of controls to reduce the risk of inappropriate access, disclosure, loss, or exfiltration of Crown data. Responsibilities Strategy and Architecture Design (40%): Define and maintain a comprehensive global data-security roadmap. Continuously develop policies, standards and technical controls to protect Crown’s sensitive data, including intellectual property, financial information, personal data and other business-critical information. Identify, assess and select global data-security technologies and capabilities, including DLP, data discovery, data classification, information protection, encryption and data security posture management solutions. Produce detailed technical designs, data flows, policy frameworks, implementation plans, and operational processes to ensure data-security solutions are resilient, scalable, and fit for Crown’s global environment. Define metrics and reporting to measure technology and policy coverage and effectiveness, incident trends, control maturity, and data-related risk reduction. Ensure data-security architecture aligns with Crown’s wider security strategy, zero-trust principles, privacy obligations, and applicable regulatory requirements. Implementation & Technical Leadership (40%): Serve as the lead technical resource throughout the implementation of new data security solutions and changes, including defining standard processes and authoring detailed documentation to allow smooth transition to an operational state. Function as the subject matter expert for Crown’s data-security related solutions, ensuring they are managed and maintained to Crown and industry standards and meet current and future requirements. Proactively identify data-security gaps, policy violations, insecure configurations and data-exposure risks across the enterprise and help coordinate efficient remediation with min