Data Governance & DLP Engineer

DayOne; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Job summary

DayOne is seeking a dedicated cybersecurity governance, risk, and compliance professional to own the data governance and DLP programme across Microsoft 365 E5 and Netskope SSE. You will classify data, label sensitive information, engineer and maintain DLP controls, and investigate data leaks end-to-end as the core focus of the role.

You’ll also contribute to broader GRC activities within a small security team.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, IT, Risk, Audit, or related discipline.
• 3–6 years in data protection, security engineering, or GRC with hands-on DLP work.
• Deep hands-on Microsoft Purview (Information Protection, DLP, Insider Risk, eDiscovery), Defender, and Intune.
• Hands-on Netskope (inline and API DLP) or comparable SSE platform.
• KQL and PowerShell for investigation and automation.
• Working knowledge of PDPA, GDPR, and NIS2.
• Familiarity with ISO/IEC 27001, ISO/IEC 27701, NIST CSF, SOC 2, or PCI DSS.
• Experience supporting audits or certification activities.
• Clear written and verbal English; able to brief non-technical stakeholders.
• Strong documentation, coordination, and analytical skills.

Responsibilities

• Own DayOne's data governance and DLP programme across Microsoft 365 E5 and Netskope SSE (~70% of role).
• Provide cybersecurity governance, risk, and compliance within a small Information Security team.
• Maintain data classification framework and data inventory; configure Purview sensitive info types and classifiers.
• Deploy and tune manual and auto-labelling across Exchange, SharePoint, OneDrive, Teams, and endpoints.
• Design, deploy, and tune Purview DLP across email, collaboration, endpoints, and browsers.
• Govern cloud app usage, risk scoring, shadow IT discovery, and policy coverage; integrate Endpoint DLP with Intune.
• Support ISO/IEC 27001, ISO/27701, SOC 2, PCI DSS, PDPA, GDPR, NIS2 compliance and audits.
• Perform governance control monitoring: access reviews, policy attestations, training, exceptions, vendor compliance.
• Conduct cybersecurity due diligence for vendors and third parties; track findings and remediation.
• Produce monthly labelling, DLP, and risk metrics; prepare management reporting.

Skills

Data protection

Microsoft Purview

Netskope SSE

PowerShell

KQL

ISO/IEC 27001

ISO/IEC 27701

GDPR

NIS2

Audits & certifications

English communication

Documentation

Education

Bachelor's degree in Cybersecurity or related discipline

Tools

Microsoft Purview

Netskope

Intune

Job description

DayOne is seeking a dedicated cybersecurity governance, risk, and compliance professional to own the data governance and DLP programme across Microsoft 365 E5 and Netskope SSE. You will classify data, label sensitive information, engineer and maintain DLP controls, and investigate data leaks end-to-end as the core focus of the role.

You’ll also contribute to broader GRC activities within a small security team.