Data Security Implementation Analyst

Key Responsibilities

• Support the implementation and operational management of data classification, data handling and retention standards across IT and OT environments.
• Deploy, configure and maintain Data Loss Prevention (DLP), information protection and data governance controls.
• Administer and optimise Microsoft security technologies, including: Microsoft Purview (DLP, Sensitivity Labels, Auto-Labelling), Microsoft Defender for Cloud Apps, Endpoint DLP, Microsoft Intune integration.
• Translate security requirements and identified risks into effective technical controls and policy configurations.
• Fine-tune DLP and information protection policies to minimise false positives while maintaining robust security.
• Maintain security documentation, audit evidence, registers and compliance records.
• Provide guidance to operational and engineering teams on secure data storage, transfer and handling practices.
• Work closely with Security Operations, Engineering and third-party service providers to ensure effective monitoring and response to security events.
• Contribute to the continuous improvement of data security processes, controls and operational procedures.

Required Experience

• Experience implementing and supporting Microsoft data security technologies.
• Strong knowledge of Microsoft Purview, including DLP, Sensitivity Labels and Information Protection.
• Experience with Microsoft Defender for Cloud Apps and Endpoint DLP.
• Good understanding of Microsoft Intune and endpoint security controls.
• Experience configuring and tuning data protection policies.
• Knowledge of data classification, retention and information governance principles.
• Experience supporting security investigations and analysing DLP alerts.
• Understanding of regulatory and compliance requirements relating to data protection.
• Experience maintaining audit evidence and supporting compliance activities.
• Ability to work with outsourced Security Operations providers or managed security services.
• Strong analytical and troubleshooting skills.
• Excellent communication and stakeholder engagement abilities.

Desirable Experience

• Experience working across both IT and Operational Technology (OT) environments.
• Knowledge of Microsoft Defender security technologies.
• Understanding of security frameworks such as ISO 27001, NIST or CIS.
• Experience supporting cloud security and Microsoft 365 security services.
• Familiarity with data governance and information lifecycle management.
• Experience working within regulated or critical national infrastructure environments.

Personal Attributes

• Detail-oriented with a strong focus on security and compliance.
• Proactive approach to identifying and mitigating risk.
• Strong problem-solving and analytical capability.
• Able to communicate effectively with both technical and non-technical stakeholders.
• Comfortable working across multiple teams in a collaborative environment.
• Passionate about improving data security and driving best practice across the organisation.