Data Security Engineer

The Premier League is seeking a Data Security Engineer to help build and operate the organisation’s data security capability across Microsoft 365, SaaS, and cloud environments. This is a hands-on engineering role with significant scope for technical ownership and professional growth. The successful candidate will establish foundational data security capabilities from the ground up, a rare opportunity to own a greenfield capability at a high-profile organisation, supporting the Premier League's wider cloud, collaboration, and AI-enabled transformation programmes.

This role will focus on implementing and managing data classification, labelling, Data Loss Prevention (DLP), and Data Security Posture Management (DSPM) capabilities to improve the visibility, protection, and control of sensitive data across the organisation. Working within the Information Security team, the role will play a key part in operationalising the Premier League’s newly approved Data Classification Policy and supporting the rollout of modern data protection controls across the business. The successful candidate will work closely with Information Security, IT, Legal, and business stakeholders to translate policy and regulatory requirements into practical technical controls.

The role includes:

• Data security platform ownership: Own the operational delivery and ongoing management of the Premier League’s data security tooling, including Microsoft Purview and DSPM capabilities.
• Microsoft Purview & data protection: Design, implement, and operate Microsoft Purview capabilities including Information Protection and DLP.
• DSPM & data visibility: Own the technical implementation and day-to-day operational management of the organisation's DSPM platform.
• Cloud & platform integration: Work with Cloud Security and infrastructure teams to embed data protection controls into new and existing platforms and services.
• Incident support & operational security: Provide subject matter expertise during investigations involving data loss, misuse, or exposure.
• Automation, reporting & engagement: Develop and maintain reporting on data security metrics and control effectiveness.

Requirements For The Role:

• Strong hands-on experience with Microsoft Purview, including Information Protection and DLP capabilities.
• Experience implementing or supporting data classification and labelling within Microsoft 365 environments.
• Understanding of data security challenges relating to SaaS platforms, cloud services, large-scale collaboration, and AI adoption.
• Ability to translate security and compliance requirements into practical technical controls.
• Working knowledge of GDPR principles and risk-based security frameworks such as NIST CSF.

Our commitment to safeguarding includes implementing robust safer recruitment procedures to assess the suitability of individuals applying for roles that involve work with children and adults who are or may be at risk of harm.