Data Classification and DLP Engineer

We are the world's largest independent energy and commodities trading company. Every day we use our expertise and logistical networks to distribute energy around the world, efficiently and responsibly. From 40 offices worldwide, we seek to add value across the energy supply chain, including deploying our scale and market understanding to help facilitate the energy transition. To date, we have committed over $1 billion of capital to renewable projects, and are identifying and developing low-carbon opportunities around the world.

Our people are our business. Talent is precious to us and we create an environment in which individuals can reach their full potential, unhindered by hierarchy. Our team comprises more than 65 nationalities and we are committed to developing and sustaining a diverse work force. Learn more about us here.

The Data Protection & DLP Engineer is responsible for designing, implementing, and maintaining the organisation's data classification, data protection, and Data Loss Prevention (DLP) capabilities. Operating within the Cyber Security team and reporting directly to the CISO, this role ensures that sensitive data is correctly identified, labelled, monitored, and protected across the enterprise. The position requires strong analytical skills, deep technical expertise with DLP technologies, and the ability to collaborate with business stakeholders to translate regulatory and business requirements into effective security controls.

Key Responsibilities

• Analyse business requirements, regulatory constraints, and operational workflows to determine data classification and protection needs

• Develop and maintain a comprehensive data classification framework aligned with organisational risk appetite and industry best practices

• Collaborate with business owners to ensure accurate mapping of data types to classification levels.

• Design and implement data labelling and protection policies using, ensuring alignment with business requirements and approved security standards

• Create, fine-tune, and maintain automated policies for data discovery, labelling, encryption, and access control

• Configure the DLP tools to enforce data classification standards across web, email, cloud, and endpoint channels

• Oversee continuous tuning and optimisation of DLP systems to reduce false positives and ensure effective detection

• Manage daily DLP alerts and cases, ensuring timely investigation, triage, documentation, and resolution.
• Provide metrics, reporting, and insights to the CISO and leadership team regarding DLP activity, trends, and risk areas

• Conduct regular training and awareness sessions for employees to promote best practices in data handling and prevent data leakage

• Bachelor's degree in cyber security, Information Technology, Computer Science, or equivalent experience

• Proven hands-on experience configuring and managing DLP and data classification platforms, (e.g. Microsoft Purview, Varonis, Zscaler, etc.)

• Experience with data classification and labelling, governance, discovery, and behaviour analytics

• Experience managing security incidents, especially data leakage investigations

• Ability to translate security and compliance requirements into actionable technical controls

• Professional certifications such as CISSP, or vendor-specific DLP credentials

• Experience with cloud security in Microsoft 365 and Azure environments

• Strong expertise in Data Loss Prevention (DLP) topics, including workstation environments (Windows and MacOS), IT infrastructure (web proxy and email traffic), and cloud platforms

• Analytical thinker with strong problem-solving skills and attention to detail.
• Highly responsive, energetic, and enthusiastic.
• Proactive and resourceful, capable of identifying issues and proposing practical solutions.
• Highly organised, able to manage multiple cases and priorities simultaneously.
• Strong analytical skills, attention to detail, and ability to work in a high-pressure environment.
• Ethical and trustworthy, demonstrating discretion in handling sensitive data and investigations.
• Collaborative team player who contributes to a positive security culture within the organisation