Data Loss Prevention Lead

National Energy System Operator Limited; United Kingdom; Hybrid; GBP 57,000 - 60,000; Full time

Benefits offered by this job

Bonus

Pension matching

NESO Savings Plan

Flexible benefits

26 days leave

Job summary

National Energy System Operator (NESO) is seeking a Data Loss Prevention Lead to protect sensitive information across the organisation. The role involves monitoring, investigating data leakage, and optimising DLP controls in collaboration with cyber, legal, and compliance teams.

Hybrid work from Warwick, with flexible arrangements and NSV clearance requirements. The successful candidate will translate business requirements into effective technical controls, review DLP rules, and provide regular

Qualifications

• Strong analytical and communication abilities.
• Understanding of data classification, information governance and privacy.
• Experience designing and maintaining DLP controls across Microsoft 365.

Responsibilities

• Monitor DLP alerts and events.
• Investigate potential data leakage incidents and assess risk and impact.
• Escalate incidents per governance processes.
• Translate requirements into technical DLP controls.
• Review DLP rules to reduce false positives.
• Produce DLP metrics and reports.

Skills

Analytical skills

Communication skills

Data classification

Information governance

Privacy principles

Tools

Microsoft Purview DLP

Job description

About the Role

The Data Loss Prevention Lead (DLP Lead) plays a key role within the Data Protection team, ensuring NESO’s sensitive information is protected from accidental or malicious leakage. The role is responsible for monitoring, investigating and optimising DLP controls and supporting the wider organisation in maintaining high data handling standards. The DLP Lead investigates policy violations and data handling behaviours. This role works closely with the rest of the Data Protection team, cybersecurity, legal and compliance to reduce the risk of data leakages. The Lead support root cause analysis and recommend corrective and preventative actions to reduce future risk. Translates business and compliance requirements into DLP controls, ensuring controls remain effective and proportionate. The role supports NESO’s transformation and its commitment to strengthening data protection. This role is based from Warwick, and we continue to offer hybrid working from office and home. We are open to full time and part time applicants, as well as flexible working arrangements. This role is designated as requiring a National Security Vetting (NSV) clearance. You will usually need to have been a resident in the UK for the last five years to apply for the required level of clearance. Key Accountabilities are outlined below. Applicants must have the right to work in the UK by the start of employment. Visa sponsorship may not be available for this role and will be considered in line with business requirements.

Key Accountabilities

• Monitor DLP alerts and events.
• Investigate potential data leakage incidents and assess risk and impact.
• Escalate confirmed incidents in accordance with incident response and governance processes.
• Support root cause analysis and recommend preventive actions.
• Translate business and compliance requirements into effective technical DLP controls.
• Review DLP rules to reduce false positives while maintaining strong data protection.
• Analyse trends in DLP alerts and incidents to identify systemic risks or training gaps.
• Produce regular metrics and reports on DLP effectiveness, incidents and risk posture.

About You

• Design, configure, and maintain Microsoft Purview DLP policies across Exchange Online, SharePoint, OneDrive, Teams, and endpoints.
• Monitor and investigate DLP alerts and potential data leakage incidents.
• Analyse DLP trends and recommend improvements to controls and user behaviours.
• Tune policies to reduce false positives while maintaining effective protection.
• Support incident investigations, root cause analysis, and corrective actions.
• Develop and maintain reporting dashboards and management information.
• Work with stakeholders to translate regulatory, privacy, and business requirements into technical controls.
• Support the implementation of sensitivity labels, information protection, and data lifecycle controls.
• Provide user awareness, training, and guidance on secure data handling.
• Assist with audits, compliance reviews, and assurance activities.
• Strong understanding of data classification, information governance and privacy principles.
• Strong analytical and communication skills.
• Strong communicator, able to explain technical issues to a non-technical audience.
• Proactive in identifying improvement opportunities and gaps.

What You’ll Get

• A competitive salary of £57,000 - £60,000 dependent on experience and capability
• You will receive a bonus based on company performance
• 26 days annual leave as standard
• A competitive contributory pension scheme where we will double match your contribution to a maximum company contribution of 12%.
• Annual Enrollment to NESO Savings Plan, when you save between £20- £500 a month from your take-home pay, we will pay a 50% matching contribution.
• NESO's flexible benefits programme provides you with more flexibility around your health, lifestyle and protection benefits, here's just a few available:
  • Flexible Bank Holidays & Holiday Trading
  • Additional Birthday Day Off
  • Cycle to Work Scheme, Retail & Gym Discounts
  • Private Medical Insurance, Critical Illness Insurance & Personal Accident Insurance

About Us

At the National Energy System Operator (NESO), we play a vital role in tackling climate change and securing Great Britain's energy future. We already operate the world's fastest decarbonising electricity system and are working towards our ambition to run it carbon‑free for a short period this year - provided the market supplies electricity exclusively from renewable sources. Alongside this, we provide expert advice to government on how to deliver a clean power system by 2030. In autumn 2024, the Electricity System Operator (ESO) transitioned to become NESO – an independent, expert public corporation with a whole‑system view across electricity, gas, and hydrogen. NESO operates independently and transparently, always acting in the best interests of all energy users. Licensed and regulated by Ofgem, we make impartial decisions that balance sustainability, affordability and security. Our organisation is fully independent from government, the regulator and all commercial interests, with a clear focus on system‑wide benefit, long‑term thing and public value. The time to deliver is now. Join the energy transformation and help shape the future. Your energy. Our future. Together.

National Energy System Operator (NESO) recognises the potential of bright and talented individuals, and we encourage you to join us as Great Britain’s energy system undergoes an ambitious, exciting, and vital transformation. Together with industry, we are creating a cleaner, more sustainable energy future. More Information is not required, as the role close date has been removed. At NESO, we believe potential comes in many forms and we’re committed to a fair, inclusive recruitment. We’re committed to building a workforce that represents the communities we serve, and a working environment in which each individual feels valued, respected, fairly treated, and able to reach their full potential. We celebrate the difference people can bring into our organisation, and welcome and encourage applicants with diverse experiences and backgrounds. At the National Energy System Operator (NESO), we play a vital role in tackling climate change and securing Great Britains's energy future. We already operate the world's fastest decarbonising electricity system and are working towards our ambition to run it carbon‑free for a short period this year - provided the market supplies electricity exclusively from renewable sources. Alongside this, we provide expert advice to government on how to deliver a clean power system by 2030. In autumn 2024, the Electricity System Operator (ESO) transitioned to become NESO – an independent, expert public corporation with a whole‑system view across electricity, gas, and hydrogen. NESO operates independently and transparently, always actin in the best interests of all energy users. Licensed and regulated by Ofgem, we make impartial decisions that balance sustainability, affordability and security. Our organisation is fully independent from government, the regulator and all commercial interests, with a clear focus on system‑wide benefit, long term thing and public value. The time to deliver is now. Join the energy transformation and help shape the future. Your energy. Our future. Together