Data Security Engineer (Purview, DSPM, DLP)

PwC Polska; Kraków; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Flexible start of the day

Learning and mentoring opportunities

Well-being program

Job summary

PwC Polska is seeking a Data Security Engineer to design, implement and operate technical controls protecting sensitive data across Microsoft 365, endpoints and cloud environments. You will work hands-on with Purview, DLP and DSPM to discover and classify sensitive data, identify security exposures, configure protection policies and remediate identified risks.

You will support the complete engineering lifecycle, from technical assessment and solution design through configuration, testing and

Qualifications

• Experience designing or operating DLP, data protection or DSPM solutions.
• Knowledge of Purview or equivalent enterprise data security platform.
• Understanding data discovery/classification across cloud and on-prem environments.
• Ability to translate security requirements into technical controls.
• Strong communication with technical and non-technical stakeholders.
• Professional English proficiency.

Responsibilities

• Design, implement and operate controls to protect data across Microsoft 365, endpoints, clouds, SaaS and AI environments.
• Hands-on with Purview, DLP, DSPM and IRM to discover/classify data and remediate risks.
• Support engineering lifecycle from assessment to deployment and handover.
• Translate requirements into scalable technical solutions.
• Analyze findings and propose prioritized remediation.
• Facilitate client workshops and present technical findings.
• Collaborate with security, IT and business stakeholders and communicate options clearly.

Skills

DLP

DSPM

Purview

Information protection

Data classification

English proficiency

Security policy translation

Education

Experience in data security platforms

Tools

Microsoft Purview

DLP tools

Job description

PwC CEE Cybersecurity Center team is made up of more than 200 specialists. We help companies design and build their digital resilience, create cybersecurity strategies, and assess cybersecurity maturity. Our team helps create and operationalize cybersecurity processes such as monitoring or incident response and supports clients in the implementation of specific security systems. We combine knowledge of business processes and present-day cyber threats with our consultants’ and engineers’ experience derived from the security audits and operational support services provided to SOC teams.

Data Security Engineer (Purview, DSPM, DLP)

Your future role:

• Design, implement and operate technical controls to protect sensitive data across Microsoft 365, endpoints, cloud platforms, data repositories, SaaS applications and AI environments,
• Work hands-on with technologies such as Microsoft Purview, DLP, DSPM and Insider Risk Management (IRM) to discover and classify sensitive data, identify security exposures, configure protection policies and remediate identified risks,
• Support the complete engineering lifecycle, from technical assessment and solution design through configuration, integration, testing and deployment to operational handover,
• Translate data protection, security and compliance requirements into effective, scalable and practical technical solutions,
• Analyse security findings and develop practical, prioritized remediation recommendations,
• Facilitate client workshops and present technical findings,
• Collaborate with security, IT and business stakeholders and communicate technical issues, options and recommendations clearly.

Apply if you have:

• Experience in designing, implementing or operating solutions in at least one of the following areas: DLP, information protection and data classification, sensitive data discovery or Data Security Posture Management (DSPM),
• Knowledge of Microsoft Purview or another enterprise data security platform,
• Understanding of sensitive data discovery and classification processes across cloud and on-premises environments,
• Ability to translate business, security and compliance requirements into data security policies and technical controls,
• Ability to analyse security findings, take ownership of assigned activities and communicate effectively with technical and non-technical stakeholders,
• Proficiency in English.

Nice to have:

• Hands-on experience with Microsoft Purview, DLP or DSPM solutions such as Cyera, Varonis or BigID, as well as other data security technologies,
• Knowledge of AI security and experience with AI security solutions,
• Experience with cloud security across Microsoft Azure, AWS or Google Cloud,
• Understanding of identity and access management principles, including permissions, access governance and excessive access risks,
• Understanding of data privacy, information governance and relevant security or privacy frameworks,
• Relevant Microsoft or other security certifications, such as SC-100, SC-200, SC-300 or SC-401,
• Professional proficiency in German.

By joining us you gain:

• Work flexibility – hybrid working model (min. 2 days in the office per week), flexible start of the day, workation, sabbatical leave,
• Development and upskilling - our full support during onboarding process, mentoring from experienced colleagues, training sessions, workshops and conversations with native speaker,
• Wide medical and well-being program - a medical care package (incl. freedom of treatment, physiotherapy, discounts on dental care), coaching, mindfulness sessions, psychological support, education through dedicated webinars and workshops, financial and legal advice,
• Possibility to create your individual benefits package (a.o. lunch pass, insurance packages, concierge, veterinary package for a pet, massages) and access to a cafeteria - vouchers, discounts on IT equipment and car purchase,
• 3 paid hours for volunteering per month,
• Additional paid Birthday Day off,
• And when you start enjoying PwC as much as we do, you may recommend your friend to work with us.

Should you have any questions, please do not hesitate to reach out to us: [e-mail].

Please note that this email is not designated for application submissions.

Your personal data will be processed for recruitment purposes by PwC Advisory sp. z o.o. sp.k. or another PwC entity which runs a recruitment process - (list of entities). If you have given separate consent, data will also be processed for other purposes in accordance with the content of the consents granted. Full information about processing your personal data is available in the Privacy Policy.