Data Security Engineer DLP

Job Type: Permanent

Location: Hybrid – Edinburgh, Telford or Birmingham office. Expected 1–2 days per week in office, subject to business needs.

Flexible working: All roles are open to part-time, job-share and other types of flexibility. We will discuss what is important to you and balancing this with business requirements during the recruitment process. You can read more about flexible working here: https://www.standardlifeplc.com/careers/flexible-working

Closing Date: 22/11/2026

Salary and benefits: £36,200 - £50,000 plus 8% bonus up to 16%, private medical cover, 38 days annual leave, up to 12% employer pension contribution, 12x salary life assurance, career breaks, income protection, 3x volunteering days and much more

Who are we?

We’re Standard Life, a retirement specialist focused entirely on retirement savings and income. We champion the belief that everyone’s journey to and through retirement can be better, and for more than 200 years, we’ve been helping our customers plan and prepare for their financial futures.

Life today is increasingly complicated, uncertain and unpredictable. People move through different careers, face unexpected moments and navigate important choices. We offer our colleagues flexibility, trust and benefits that work for whatever life brings. In return we expect curiosity, connection, accountability and high standards. We make room for what matters - so you can bring your best, every day.

The role

As a Data Security Engineer, you’ll play a key role in implementing, operating and improving technical controls that protect Standard Life’s sensitive data.

You’ll work across Data Loss Prevention (DLP) and Data Access Governance (DAG), using technologies including Microsoft Purview and Varonis. You’ll support DLP policy development and tuning, investigate data security events, analyse data access and permissions, and help remediate inappropriate or excessive access.

Working alongside senior engineers, analysts and wider technology teams, you’ll help ensure our data security controls remain effective, practical and continuously improve.

This is a data security role and is not a data engineering or data platform role.

Key Responsibilities

• Implement, operate and maintain DLP and Data Access Governance controls.
• Configure, support and tune Microsoft Purview DLP policies to improve effectiveness and reduce false positives and unnecessary business impact.
• Support Varonis Data Access Governance, including:

sensitive and unstructured data discovery
permissions and access analysis
identifying excessive, inappropriate or stale access
access reviews and certification
remediation of data exposure and access risks

• Investigate data security events and support remediation of identified risks and control gaps.
• Support onboarding of data repositories, business use cases and new data security controls.
• Work with senior engineers to analyse control effectiveness and identify opportunities for improvement.
• Support integration of data security capabilities with technologies including Microsoft Defender and Sentinel.
• Develop and maintain automation for routine operational, analysis and reporting activities.
• Collaborate with architecture, application, infrastructure and business teams to implement appropriate data security controls.
• Maintain clear technical documentation and control evidence.
• Contribute to team knowledge sharing and continuous improvement.

What are we looking for?

We’re looking for someone with practical experience in data security, DLP, information protection or Data Access Governance who wants to develop their expertise across a broader enterprise Data Security environment.

You do not need to be an expert across every technology we use. You may have stronger experience in Microsoft Purview/DLP, Varonis/DAG or another enterprise data security technology. What is important is a good technical foundation, understanding of data security risks and the ability to learn and work across different technologies.

Essential Experience

• Practical experience working with Data Security, DLP, Information Protection or Data Access Governance technologies.
• Good understanding of data security and DLP principles.
• Experience implementing, operating or supporting technical security controls.
• Understanding of sensitive data, data classification and information protection.
• Experience investigating technical issues, security events or control failures.
• Ability to analyse problems and contribute to practical technical solutions.
• Experience working with technical teams in an enterprise environment.

Desirable Experience

Experience in one or more of the following would be particularly valuable:

• Microsoft Purview, including DLP, Information Protection or Sensitivity Labelling.
  Varonis or other Data Access Governance technologies.
• Permissions and access analysis.
• Access reviews, certification or access remediation.
• Unstructured data security and sensitive data discovery.
• Microsoft Defender or Sentinel.
• Microsoft Entra ID.
• PowerShell or other automation/scripting.
• Security frameworks including ISF Standard of Good Practice, ISO 27001 or NIST.

We want to hire the whole version of you

We are committed to ensuring that everyone feels accepted and welcome. If your experience looks different from what we’ve advertised and you believe that you can bring value to the role, we’d love to hear from you.

If you require any adjustments to the recruitment process, please let us know so we can help you to be at your best.

We’re reviewing applications as they come in, so apply early to avoid missing out.

Find out more about working at Standard Life

Guide for Candidates: https://standardlifeplc.pagetiger.com/guideforcandidates/guideforcandidates

Find or get answers from our colleagues: https://www.standardlifeplc.com/careers #LI-GJ1