Data Security Engineer (Purview, DSPM, DLP)

Job Description & Summary

About the team

We help integrate security elements efficiently and reliably into the technological environments of our clients. We provide assurance that changes affecting the IT environment are secure while helping clients realise value from their investments quickly. You will join our Identity and Cloud Security team, which focuses on identity, privileged access management, cloud security and data security as part of our broader Cyber Security team.

About your manager

Martin Zbořil leads the Identity & Cloud Security team and brings extensive expertise in cloud security, supported by his PhD studies in this field. Beyond cloud security, he has broad experience across multiple cybersecurity domains. Martin is passionate about building a cross-functional team with a strong focus on identity management and data protection in cloud environments. He places great emphasis on continuous learning, upskilling, and personal development.

Job description & summary

As a Data Security Engineer, you will design, implement and operate technical controls that protect sensitive data across Microsoft 365, endpoints, cloud platforms, data repositories, SaaS applications and AI environments.

You will:

• Work hands-on with technologies such as Microsoft Purview, Data Loss Prevention (DLP), Data Security Posture Management (DSPM) and Insider Risk Management (IRM).
• Discover and classify sensitive data across cloud and on-premises environments.
• Identify data security exposures and analyse security findings.
• Design and configure data protection policies and technical controls.
• Develop practical, prioritised remediation recommendations and help remediate identified risks.
• Support the complete engineering lifecycle, from technical assessment and solution design through configuration, integration, testing and deployment.
• Support operational handover and the ongoing operation of implemented data security controls.
• Work with security, IT and business stakeholders to translate data protection requirements into effective, scalable and practical technical solutions.

What matters to us

We do not expect you to be an expert in every area from day one. We value practical experience, a strong security foundation and a willingness to develop across different data security technologies.

• Practical understanding of cybersecurity, data security and data security principles.

• Experience with the design, implementation or operation of at least one of the following areas: DLP, Information protection and data classification, sensitive-data discovery, data security posture management (DSPM)

• Knowledge of with Microsoft Purview or another enterprise data security platform.

• Understanding of sensitive-data discovery and classification processes across cloud and on-premises environments.

• Ability to translate business, security and compliance requirements into data security policies and technical controls.

• Ability to analyse security findings and develop practical, prioritized remediation recommendations.

• Ability to explain technical issues, options and recommendations clearly to technical and non-technical stakeholders.

• Ability to work independently, take ownership of assigned activities and deliver outcomes that meet client needs.
• Proficiency in English.

What will help you stand out

• Hands-on experience with Microsoft Purview, DLP or DSPM solutions such as Cyera, Varonis or BigID, or experience with AI security and AI security solutions.
• Familiarity with Microsoft security technologies such as Microsoft Defender, Microsoft Sentinel and Microsoft Entra.
• Experience with cloud security across Microsoft Azure, AWS or Google Cloud and an understanding of identity and access management, permissions, access governance and excessive-access risks.
• Understanding of data privacy, information governance and relevant security or privacy frameworks, as well as broader experience in data security strategy, policies or target operating models.
• Experience delivering cybersecurity assessments, implementations or advisory projects, facilitating client workshops, presenting technical findings or coordinating projects.
• Relevant Microsoft or other security certifications, such as SC-100, SC-200, SC-300 or SC-401, and/or professional proficiency in German.

Why you’ll enjoy working here

• Professional growth that matches your ambitions and pace. Gain in months the kind of experience that can take years to build elsewhere.
• Fair pay with no gaps. We are among the few companies in the Czech Republic certified for Equal Pay.
• A flexible benefits programme with 45,000 points to spend on what matters most to you.
• 30 days of paid time off, including three well-being days and two additional days off at the end of the year.
• An opportunity to give back to the community with one paid volunteering day every year.
• The chance to work from one of PwC’s international offices (available from the Senior Associate level).
• We support your learning and development journey: Benefit from training and certifications in business and digital skills aligned with your area of expertise, as well as soft-skills development covering presentation skills, coaching, effective communication, and more. We cover the costs of professional certifications.
• A buddy programme, regular feedback, and access to a coach who can support your professional development and career path.
• Extensive well-being support and initiatives promoting a healthy lifestyle, from Dr. Digital and Human Dynamic programmes to workplace yoga and running events.
• An ultrabook and an iPhone with unlimited data.
• Social events and Away Days.

Check us out on: Cyber & Privacy | Czech Republic

At PwC, we help clients solve today’s and tomorrow’s challenges across audit, consulting, tax, legal, technology, and data. We create an environment where people can learn, grow, and build a career in their own way. We believe the best results come from diverse experiences and perspectives. That’s why we foster an inclusive culture where everyone can be themselves, build on their strengths, and contribute to work that makes a real impact.

Interested in joining us? We’d love to hear from you and tell you more about this opportunity.

Ochrana osobních údajů pro žadatele o zaměstnání / Privacy Statement for Recruitment Applicants

#LI-EK1