Data Security Engineer DLP

Job Type:  Permanent 

Location: Hybrid – Edinburgh, Telford  or Birmingham office. Expected 1–2 days per week in office, subject to business needs.

• →Implement, operate and maintain DLP and Data Access Governance controls.
• →Configure, support and tune Microsoft Purview DLP policies to improve effectiveness and reduce false positives and unnecessary business impact.
• →Support Varonis Data Access Governance, including:

sensitive and unstructured data discovery
permissions and access analysis
identifying excessive, inappropriate or stale access
access reviews and certification
remediation of data exposure and access risks

• →Investigate data security events and support remediation of identified risks and control gaps.
• →Support onboarding of data repositories, business use cases and new data security controls.
• →Work with senior engineers to analyse control effectiveness and identify opportunities for improvement.
• →Support integration of data security capabilities with technologies including Microsoft Defender and Sentinel.
• →Develop and maintain automation for routine operational, analysis and reporting activities.
• →Collaborate with architecture, application, infrastructure and business teams to implement appropriate data security controls.
• →Maintain clear technical documentation and control evidence.
• →Contribute to team knowledge sharing and continuous improvement.

We’re looking for someone with practical experience in data security, DLP, information protection or Data Access Governance who wants to develop their expertise across a broader enterprise Data Security environment.

You do not need to be an expert across every technology we use. You may have stronger experience in Microsoft Purview/DLP, Varonis/DAG or another enterprise data security technology. What is important is a good technical foundation, understanding of data security risks and the ability to learn and work across different technologies.

• Practical experience working with Data Security, DLP, Information Protection or Data Access Governance technologies.
• Good understanding of data security and DLP principles.
• Experience implementing, operating or supporting technical security controls.
• Understanding of sensitive data, data classification and information protection.
• Experience investigating technical issues, security events or control failures.
• Ability to analyse problems and contribute to practical technical solutions.
• Experience working with technical teams in an enterprise environment.

Experience in one or more of the following would be particularly valuable:

• Microsoft Purview, including DLP, Information Protection or Sensitivity Labelling.
  Varonis or other Data Access Governance technologies.
• Permissions and access analysis.
• Access reviews, certification or access remediation.
• Unstructured data security and sensitive data discovery.
• Microsoft Defender or Sentinel.
• Microsoft Entra ID.
• PowerShell or other automation/scripting.
• Security frameworks including ISF Standard of Good Practice, ISO 27001 or NIST.

We are committed to ensuring that everyone feels accepted and welcome. If your experience looks different from what we’ve advertised and you believe that you can bring value to the role, we’d love to hear from you.

If you require any adjustments to the recruitment process, please let us know so we can help you to be at your best.

We’re reviewing applications as they come in, so apply early to avoid missing out.

Find out more about working at Standard Life

Guide for Candidates: https://standardlifeplc.pagetiger.com/guideforcandidates/guideforcandidates

Find or get answers from our colleagues: https://www.standardlifeplc.com/careers #LI-GJ1