- Level
- Mid level
- Experience
- Not stated
- Work style
- Hybrid
- Full-time
- Area
- Security engineering
At a glance
The role in plain English
This role involves designing, implementing and operating technical controls to protect sensitive data across cloud, on-premises, and SaaS environments. The position suits those with a practical understanding of data security principles and experience with tools like Microsoft Purview or DLP. Day-to-day tasks include data discovery, policy configuration, risk analysis, and collaborating with stakeholders to deliver effective data protection solutions.
What you'll do
- Design and implement data protection controls and policies
- Discover and classify sensitive data across environments
- Analyse security findings and recommend remediations
- Support configuration, integration, testing and deployment of solutions
- Collaborate with stakeholders to translate requirements into technical solutions
What they're looking for
Essential
- Practical understanding of cybersecurity and data security principles
- Experience with DLP, data classification or DSPM
- Knowledge of Microsoft Purview or similar platforms
- Ability to analyse security findings and recommend remediations
- Proficiency in English
Nice to have
- Hands-on experience with Microsoft Purview, DLP or DSPM solutions
- Familiarity with Microsoft Defender, Sentinel or Entra
- Experience with cloud security across Azure, AWS or GCP
- Relevant Microsoft or security certifications
Core skills
- Microsoft Purview
- DLP
- DSPM
- Data classification
- Security analysis
- Cloud security
- Stakeholder communication
Certifications mentioned
- SC-100
- SC-200
- SC-300
- SC-401
The shape of the job
Technical depth
3/5
Pace
3/5
Ownership
4/5
Teamwork
4/5
Cyberend's reading of the listing, not the employer's own scores.
Application toolkit
Make your application count
See which requirements your CV meets and what is missing.
Your CV is used for this answer only and never stored.
Questions to prepare for
- 01Describe your experience implementing DLP or DSPM solutions.
- 02How would you approach discovering sensitive data in a hybrid environment?
- 03Explain how you translate business requirements into technical data security controls.
- 04What steps would you take to remediate a data security finding in Microsoft Purview?
About PwC
PwC is a professional services firm providing audit, consulting, tax, legal, technology and data services. The team focuses on integrating security into client IT environments and supporting identity, cloud and data security.
Full job descriptionAs published by PwC
Job Description & Summary
About the team
We help integrate security elements efficiently and reliably into the technological environments of our clients. We provide assurance that changes affecting the IT environment are secure while helping clients realise value from their investments quickly. You will join our Identity and Cloud Security team, which focuses on identity, privileged access management, cloud security and data security as part of our broader Cyber Security team.
About your manager
Martin Zbořil leads the Identity & Cloud Security team and brings extensive expertise in cloud security, supported by his PhD studies in this field. Beyond cloud security, he has broad experience across multiple cybersecurity domains. Martin is passionate about building a cross-functional team with a strong focus on identity management and data protection in cloud environments. He places great emphasis on continuous learning, upskilling, and personal development.
Job description & summary
As a Data Security Engineer, you will design, implement and operate technical controls that protect sensitive data across Microsoft 365, endpoints, cloud platforms, data repositories, SaaS applications and AI environments.
You will:
- Work hands-on with technologies such as Microsoft Purview, Data Loss Prevention (DLP), Data Security Posture Management (DSPM) and Insider Risk Management (IRM).
- Discover and classify sensitive data across cloud and on-premises environments.
- Identify data security exposures and analyse security findings.
- Design and configure data protection policies and technical controls.
- Develop practical, prioritised remediation recommendations and help remediate identified risks.
- Support the complete engineering lifecycle, from technical assessment and solution design through configuration, integration, testing and deployment.
- Support operational handover and the ongoing operation of implemented data security controls.
- Work with security, IT and business stakeholders to translate data protection requirements into effective, scalable and practical technical solutions.
What matters to us
We do not expect you to be an expert in every area from day one. We value practical experience, a strong security foundation and a willingness to develop across different data security technologies.
- Practical understanding of cybersecurity, data security and data security principles.
- Experience with the design, implementation or operation of at least one of the following areas: DLP, Information protection and data classification, sensitive-data discovery, data security posture management (DSPM)
- Knowledge of with Microsoft Purview or another enterprise data security platform.
- Understanding of sensitive-data discovery and classification processes across cloud and on-premises environments.
- Ability to translate business, security and compliance requirements into data security policies and technical controls.
- Ability to analyse security findings and develop practical, prioritized remediation recommendations.
- Ability to explain technical issues, options and recommendations clearly to technical and non-technical stakeholders.
- Ability to work independently, take ownership of assigned activities and deliver outcomes that meet client needs.
- Proficiency in English.
What will help you stand out
- Hands-on experience with Microsoft Purview, DLP or DSPM solutions such as Cyera, Varonis or BigID, or experience with AI security and AI security solutions.
- Familiarity with Microsoft security technologies such as Microsoft Defender, Microsoft Sentinel and Microsoft Entra.
- Experience with cloud security across Microsoft Azure, AWS or Google Cloud and an understanding of identity and access management, permissions, access governance and excessive-access risks.
- Understanding of data privacy, information governance and relevant security or privacy frameworks, as well as broader experience in data security strategy, policies or target operating models.
- Experience delivering cybersecurity assessments, implementations or advisory projects, facilitating client workshops, presenting technical findings or coordinating projects.
- Relevant Microsoft or other security certifications, such as SC-100, SC-200, SC-300 or SC-401, and/or professional proficiency in German.
Why you’ll enjoy working here
- Professional growth that matches your ambitions and pace. Gain in months the kind of experience that can take years to build elsewhere.
- Fair pay with no gaps. We are among the few companies in the Czech Republic certified for Equal Pay.
- A flexible benefits programme with 45,000 points to spend on what matters most to you.
- 30 days of paid time off, including three well-being days and two additional days off at the end of the year.
- An opportunity to give back to the community with one paid volunteering day every year.
- The chance to work from one of PwC’s international offices (available from the Senior Associate level).
- We support your learning and development journey: Benefit from training and certifications in business and digital skills aligned with your area of expertise, as well as soft-skills development covering presentation skills, coaching, effective communication, and more. We cover the costs of professional certifications.
- A buddy programme , regular feedback, and access to a coach who can support your professional development and career path.
- Extensive well-being support and initiatives promoting a healthy lifestyle, from Dr. Digital and Human Dynamic programmes to workplace yoga and running events.
- An ultrabook and an iPhone with unlimited data.
- Social events and Away Days .
Check us out on: Cyber & Privacy | Czech Republic
At PwC, we help clients solve today’s and tomorrow’s challenges across audit, consulting, tax, legal, technology, and data. We create an environment where people can learn, grow, and build a career in their own way. We believe the best results come from diverse experiences and perspectives. That’s why we foster an inclusive culture where everyone can be themselves, build on their strengths, and contribute to work that makes a real impact.
Interested in joining us? We’d love to hear from you and tell you more about this opportunity.
Ochrana osobních údajů pro žadatele o zaměstnání / Privacy Statement for Recruitment Applicants
#LI-EK1