Security Engineer - Data Protection

Join to apply for the Security Engineer - Data Protection role at Lockton

3 days ago Be among the first 25 applicants

Lockton is seeking a dedicated Security Engineer specializing in Data Protection. This role is focused on leveraging the Microsoft Purview suite to safeguard our organization’s most critical data assets across our hybrid environment. The ideal candidate will be a subject matter expert in designing, implementing, and managing data‑centric security controls within Microsoft Purview and Azure.

• Design, implement, and manage a comprehensive data protection strategy utilizing Microsoft Purview governance and compliance portal.
• Deploy and configure Microsoft Purview solutions, including Data Loss Prevention (DLP), Microsoft Information Protection (MIP) for data classification and sensitivity labeling, Insider Risk Management, and eDiscovery.
• Develop and enforce data governance policies to discover, classify, and protect sensitive data across Microsoft 365, Azure, on‑premises infrastructure, and other SaaS applications.
• Create, tune, and monitor robust DLP policies for endpoints, email, Microsoft Teams, and cloud applications to prevent data exfiltration.
• Collaborate with business, legal, and compliance teams to translate data protection requirements into technical policies and controls.
• Manage the configuration and lifecycle of sensitivity labels to ensure proper encryption, access control, and visual markings are applied to documents and emails.
• Serve as the subject matter expert for data‑related security incidents, using Purview tools for investigation, forensics, and response.
• Monitor the effectiveness of data protection controls and provide regular reporting on compliance, risk posture, and policy enforcement to leadership.
• Stay current with the latest advancements and threats in the data protection landscape and the evolution of the Microsoft Purview platform.
• Actively coach and mentor other security and technology team members on data protection best practices.
• Participate in the security team's on‑call rotation and be available to respond to critical data security incidents outside of regular business hours.

• Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent work experience.
• Professional certification in Microsoft security, such as SC-400:
  Microsoft Information Protection Administrator; AZ-500 or other relevant certifications are a plus.
• Minimum 5 years of experience in information security, with at least 3 years focused on data protection, data governance, or information lifecycle management.
• Hands‑on experience with Microsoft Purview suite (formerly Microsoft 365 Compliance Center), including DLP, MIP/AIP, Data Classification, Insider Risk Management.
• Strong experience with Microsoft Azure ecosystem and securing data within Azure services (Azure Storage, Azure SQL, etc.).
• Proficiency with scripting languages, particularly Power Shell, for automating security and compliance tasks.
• Strong understanding of data privacy regulations and compliance frameworks (GDPR, CCPA, HIPAA, ISO 27001).
• Excellent analytical and problem‑solving skills with the ability to manage security incidents under pressure.
• Exceptional communication and collaboration skills; ability to effectively communicate complex technical concepts to both technical and non‑technical audiences.

• Mid‑Senior level

• Full‑time

• Information Technology

• Insurance

Referrals increase your chances of interviewing at Lockton by 2x

Apply BELOW