Data Governance & DLP Engineer

Day One; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

DayOne is seeking a cybersecurity professional to own data governance and DLP across Microsoft 365 E5 and Netskope SSE, classify enterprise data, label sensitivity, and maintain DLP controls. This role sits in a small Information Security team and drives policy, incident response, and audit support.

You will collaborate with business units, monitor data handling, and continuously improve DLP coverage and compliance across the environment.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, IT, Risk, Audit, or related discipline.
• 3–6 years in data protection, security engineering, or GRC with hands-on DLP work.
• Deep hands-on Microsoft Purview (Information Protection, DLP, Insider Risk, eDiscovery), Defender, and Intune.
• Hands-on Netskope (inline and API DLP, CASB) or comparable SSE platform.
• KQL and PowerShell for investigation and automation.
• Familiarity with PDPA, GDPR, and NIS2.
• ISO/IEC 27001/27701, SOC 2, PCI DSS familiarity.
• Clear written and verbal English; able to brief non-technical stakeholders.
• Strong documentation, coordination, and analytical skills.

Responsibilities

• Own data governance and data loss prevention across Microsoft 365 E5 and Netskope SSE.
• Classify enterprise data, drive sensitivity labeling, and maintain DLP controls.
• Investigate data leaks end-to-end and coordinate remediation with the SOC.
• Monitor governance, risk, and compliance activities across the business.
• Support audits and certifications with evidence and control mappings.
• Provide awareness and reporting on labelling, DLP, and risk metrics.

Skills

English communication

Analytical reasoning

Documentation

Education

Bachelor's degree in Cybersecurity or related field

Tools

Microsoft Purview

Microsoft Defender

Microsoft Intune

Netskope SSE

KQL

PowerShell

Job description

DayOne is seeking a cybersecurity professional to own data governance and DLP across Microsoft 365 E5 and Netskope SSE, classify enterprise data, label sensitivity, and maintain DLP controls. This role sits in a small Information Security team and drives policy, incident response, and audit support.

You will collaborate with business units, monitor data handling, and continuously improve DLP coverage and compliance across the environment.