DLP Lead - Data Protection & Incident Intelligence (Hybrid)

National Energy System Operator Limited; Warwick; Hybrid; GBP 57,000 - 60,000; Full time

Benefits offered by this job

Bonus based on company performance

26 days annual leave

Pension scheme (double match up to 12%

NESO Savings Plan (50% match)

Flexible benefits programme

Job summary

NESO is seeking a Data Loss Prevention Lead to protect sensitive information by designing and monitoring DLP controls across Microsoft 365 services. You will work with the Data Protection team, cybersecurity, legal and compliance to reduce data leak risks and support remediation actions.

The role requires translating regulatory requirements into technical DLP controls, maintaining effective policies, and producing regular DLP reporting while communicating clearly with non-technical stakeholders.

Qualifications

• Experience designing and maintaining Microsoft Purview DLP policies across Microsoft 365 services.
• Ability to translate regulatory and business requirements into technical DLP controls.
• Strong understanding of data classification, information governance and privacy principles.

Responsibilities

• Monitor DLP alerts and events and investigate incidents.
• Tune policies to reduce false positives while maintaining protection.
• Prepare and present regular DLP metrics and risk reports.
• Support incident investigations, root cause analysis and corrective actions.
• Work with stakeholders to translate requirements into technical controls.

Skills

Analytical thinking

Communication

Data protection knowledge

Stakeholder management

Tools

Microsoft Purview DLP policies

Exchange Online

SharePoint

OneDrive

Teams

Job description

NESO is seeking a Data Loss Prevention Lead to protect sensitive information by designing and monitoring DLP controls across Microsoft 365 services. You will work with the Data Protection team, cybersecurity, legal and compliance to reduce data leak risks and support remediation actions.

The role requires translating regulatory requirements into technical DLP controls, maintaining effective policies, and producing regular DLP reporting while communicating clearly with non-technical stakeholders.