The role
As a Data Security Engineer, you’ll play a key role in implementing, operating and improving technical controls that protect Standard Life’s sensitive data.
You’ll work across Data Loss Prevention (DLP) and Data Access Governance (DAG), using technologies including Microsoft Purview and Varonis. You’ll support DLP policy development and tuning, investigate data security events, analyse data access and permissions, and help remediate inappropriate or excessive access.
Working alongside senior engineers, analysts and wider technology teams, you’ll help ensure our data security controls remain effective, practical and continuously improve.
This is a data security role and is not a data engineering or data platform role.
Key Responsibilities
Implement, operate and maintain DLP and Data Access Governance controls.
Configure, support and tune Microsoft Purview DLP policies to improve effectiveness and reduce false positives and unnecessary business impact.
Support Varonis Data Access Governance, including
- sensitive and unstructured data discovery
- permissions and access analysis
- identifying excessive, inappropriate or stale access
- access reviews and certification
- remediation of data exposure and access risks
Investigate data security events and support remediation of identified risks and control gaps.
Support onboarding of data repositories, business use cases and new data security controls.
Work with senior engineers to analyse control effectiveness and identify opportunities for improvement.
Support integration of data security capabilities with technologies including Microsoft Defender and Sentinel.
Develop and maintain automation for routine operational, analysis and reporting activities.
Collaborate with architecture, application, infrastructure and business teams to implement appropriate data security controls.
Maintain clear technical documentation and control evidence.
Contribute to team knowledge sharing and continuous improvement.
What are we looking for?
We’re looking for someone with practical experience in data security, DLP, information protection or Data Access Governance who wants to develop their expertise across a broader enterprise Data Security environment.
You do not need to be an expert across every technology we use. You may have stronger experience in Microsoft Purview/DLP, Varonis/DAG or another enterprise data security technology. What is important is a good technical foundation, understanding of data security risks and the ability to learn and work across different technologies.
Essential Experience
Practical experience working with Data Security, DLP, Information Protection or Data Access Governance technologies.
Good understanding of data security and DLP principles.
Experience implementing, operating or supporting technical security controls.
Understanding of sensitive data, data classification and information protection.
Experience investigating technical issues, security events or control failures.
Ability to analyse problems and contribute to practical technical solutions.
Experience working with technical teams in an enterprise environment.
Desirable Experience
Experience in one or more of the following would be particularly valuable:
- Microsoft Purview, including DLP, Information Protection or Sensitivity Labelling.
- Varonis or other Data Access Governance technologies.
Permissions and access analysis.
Access reviews, certification or access remediation.
Unstructured data security and sensitive data discovery.
Microsoft Defender or Sentinel.
Microsoft Entra ID.
PowerShell or other automation/scripting.
Security frameworks including ISF Standard of Good Practice, ISO 27001 or NIST.
We want to hire the whole version of you
We are committed to ensuring that everyone feels accepted and welcome. If your experience looks different from what we’ve advertised and you believe that you can bring value to the role, we’d love to hear from you.
If you require any adjustments to the recruitment process, please let us know so we can help you to be at your best.
We’re reviewing applications as they come in, so apply early to avoid missing out.
Find out more about working at Standard Life
Guide for Candidates: https://standardlifeplc.pagetiger.com/guideforcandidates/guideforcandidates
Find or get answers from our colleagues: https://www.standardlifeplc.com/careers #LI-GJ1
