Cyber Security Analyst – Data Loss Prevention

Asda; Leeds; On-site; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Discretionary company bonus

Company pension up to 7% matched

15% colleague discount in store and在线

Wellbeing services access

Asda Allies Inclusion Networks

Parental leave policies

Job summary

Asda House in Leeds is seeking a Cyber Security Analyst specialising in Data Loss Prevention to protect sensitive information across the business. You will design, monitor and operate DLP capabilities with a focus on Microsoft Purview and Zscaler, ensuring data controls meet regulatory requirements.

Collaborating with Technology, Legal and HR, you will refine DLP rules, respond to incidents, develop runbooks, and report on trends to leadership.

Qualifications

• Hands-on experience with Microsoft Purview Information Protection / DLP and Zscaler tools.
• Knowledge of data protection and insider risk concepts and controls.
• Understanding GDPR and PCI DSS regulatory requirements.

Responsibilities

• Operate and optimise DLP tools (Purview & Zscaler) to detect and prevent data loss.
• Monitor DLP alerts and triage incidents with SOC, Legal, HR and business teams.
• Define DLP rules, policies and exceptions balancing security and usability.
• Support integration of DLP with insider risk, governance, monitoring and cloud security.
• Develop and maintain playbooks and runbooks for DLP events and escalation.
• Produce reporting and metrics on DLP activity and trends for leadership.
• Support awareness and training to embed data protection culture.

Skills

Microsoft Purview DLP

Zscaler

Data protection & insider risk

Regulatory requirements

Security operations

Communication

Education

Bachelor's degree in Cyber Security or related field

Tools

Microsoft Purview

Zscaler

Job description

Job Title

Cyber Security Analyst - Data Loss Prevention

Location

Asda House

Employment Type

Full time

Contract Type

Permanent

Hours Per Week

37.5

Salary

Competitive salary plus benefits.

Category

Cyber Security

Closing Date

16 August 2026

Location: Leeds (Asda House) / Hybrid (3 days in office)

Department: Technology - Cyber Security

Reports to: SOC and Incident Response Manager

Role Purpose

We are looking for a Cyber Security Analyst - Data Loss Prevention (DLP) to help protect Asda's sensitive information and strengthen our data security posture. This role will focus on the design, monitoring, and operation of DLP capabilities, with a primary focus on Microsoft Purview and Zscaler platforms.
The DLP Analyst will work across Technology and the wider business to prevent unauthorised data movement, respond to incidents, and ensure that data security controls are effective, aligned with business needs, and support compliance with regulatory and contractual obligations.

Key Responsibilities

• Operate and optimise Asda's DLP tools (Microsoft Purview Information Protection & Zscaler) to detect, investigate, and prevent potential data loss events.
• Monitor DLP alerts, triage and elevate incidents, working with SOC, Legal, HR, and business teams where appropriate.
• Collaborate with business stakeholders to define DLP rules, policies, and exceptions that balance security, usability, and compliance.
• Support integration of DLP with broader security and compliance initiatives (insider risk, governance, monitoring, cloud security).
• Provide recommendations for continuous improvement of data protection controls, coverage, and workflows.
• Develop and maintain playbooks and runbooks for common DLP events and escalation scenarios.
• Produce reporting and metrics on DLP activity, effectiveness, and trends for leadership and governance forums.
• Support awareness and training efforts to embed a strong data protection culture across the business.

Skills & Experience

• Hands‑on experience with Microsoft Purview Information Protection / DLP and Zscaler security tools.
• Knowledge of data protection and insider risk threats, controls, and investigative techniques.
• Understanding of regulatory and contractual requirements for data protection (e.g., GDPR, PCI DSS).
• Familiarity with security operations processes: alert triage, incident response, playbooks.
• Strong analytical and problem‑solving skills; ability to interpret DLP events in context of business processes.
• Clear communication skills able to explain data protection risks and requirements to technical and non-technical stakeholders.

Desirable:

• Microsoft certifications (e.g., SC-400, SC-900, MS-500).
• Experience in large‑scale enterprise environments.
• Knowledge of wider Microsoft security stack (Entra ID, Sentinel, Defender).

What Success Looks Like

• Effective detection and response to data loss attempts across email, endpoint, cloud, and web channels.
• Reduction in false positives and improved precision of DLP controls.
• Stakeholders (Technology, Risk, Legal, HR, Business Units) feel supported and confident in Asda's ability to protect sensitive information.
• Continuous improvement of DLP capability, aligned with emerging threats and business priorities.

What You'll Gain

• Be part of a growing Cyber Security function protecting one of the UK's largest retailers.
• Opportunity to work hands‑on with Microsoft's latest security stack and Zscaler platforms.
• A collaborative and values‑led culture with real career growth opportunities.
• Hybrid working, competitive benefits, and the chance to make a real impact for millions of customers and colleagues.

Asda Culture: How We Work

• We are one team: success is shared across Technology, Risk, Operations, Stores, and Supply Chain.
• We are customer‑obsessed: keeping customer trust at the centre of our decision‑making.
• We are bold and innovative: continuously adapting to protect against new threats.
• We are ethical and transparent: doing the right thing, the right way.

This role is open to job share / Part‑time / Flexible working.

Please be advised that this position requires attendance at Asda House in Leeds for a minimum of three days per week. We're really looking forward to having you around!

#LI-ES1 #LI-Hybrid

If you have any questions about the role, then please email [e-mail]

Everything you'll love

To ensure we balance moments where we know we need to collaborate together and the need for flexibility, Asda has a hybrid way of working with a minimum 3 days a week in one of our Home Offices. Over and above this, each area of Asda may have additional requirements which may require spending more days in the office, visiting suppliers, stores or depots.

You will also get an excellent benefits package including:

• Discretionary company bonus
• Company pension up to 7% matched
• 15% colleague discount in store and online
• Free access to wellbeing services such as Stream, 24/7 virtual GP, counselling, health and dental cash plans and a 24/7 employee assistance helpline, alongside discounts across a range of services and activities, from airport parking, enhanced to theme parks and cinemas.
• Asda Allies Inclusion Networks - helping colleagues to make sure everybody is included and that our differences are recognised and celebrated
• Excellent parental leave policies, including maternity & adoption leave, paternity leave, shared parental leave, neonatal care leave, and support for those doing fertility treatments.

We want all colleagues to be able to bring their best and true selves to work, every day. Simply put, we want our colleagues to be Proud to be Asda and proud to be themselves