Data Security Engineer (Purview, DSPM, DLP)

About the role

PwC's Identity and Cloud Security team, part of its broader Cyber Security team, is hiring a Data Security Engineer in Prague. The engineer designs, implements and operates technical controls that protect sensitive data across Microsoft 365, endpoints, cloud platforms, data repositories, SaaS applications and AI environments. The team leader, Martin Zbořil, has a PhD in cloud security and focuses on identity management and data protection.

Key responsibilities

• Work hands-on with Microsoft Purview, DLP, DSPM and Insider Risk Management (IRM)
• Discover and classify sensitive data across cloud and on-premises environments
• Identify data security exposures and analyse security findings
• Design and configure data protection policies and technical controls
• Develop prioritised remediation recommendations and help remediate risks
• Support the engineering lifecycle, from assessment and design through configuration, integration, testing and deployment
• Support operational handover and the ongoing operation of data security controls
• Work with security, IT and business stakeholders to turn data protection requirements into practical technical solutions

Required profile

• Practical understanding of cybersecurity, data security and data security principles
• Experience designing, implementing or operating at least one of: DLP, information protection and data classification, sensitive-data discovery, or DSPM
• Knowledge of Microsoft Purview or another enterprise data security platform
• Ability to translate business, security and compliance requirements into policies and controls, and to explain technical options to technical and non-technical stakeholders
• Ability to work independently and deliver against client needs
• Proficiency in English

Required skills

• Microsoft Purview, DLP or DSPM tools such as Cyera, Varonis or BigID (helps)
• Microsoft Defender, Microsoft Sentinel and Microsoft Entra (helps)
• Cloud security on Azure, AWS or Google Cloud and IAM (helps)
• Data privacy, information governance and security frameworks (helps)
• Relevant Microsoft or other security certifications such as SC-100, SC-200, SC-300 or SC-401, and/or German proficiency (helps)

What we offer

• Professional growth, training and certification support, and a buddy programme
• Flexible benefits programme with 45,000 points
• 30 days of paid time off, including well-being days
• One paid volunteering day per year
• Work from an international office from the Senior Associate level
• Well-being initiatives, social events and Away Days
• An ultrabook and an iPhone with unlimited data