Data Security Engineer
A specialist data security engineer at BAT's digital unit in Selangor who defines, implements, and manages data protection across the company using Microsoft Purview (DLP, Information Protection, DSPM), collaborating with application and security teams on classification and compliance, with supporting work across Microsoft 365, Azure, and Entra ID.
- Compensation
- Not disclosed
- Location
- Selangor, Malaysia
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- 5+ years of hands-on experience in data security and data protection engineering with strong Microsoft Purview expertise
- Good understanding of data protection, information governance, compliance frameworks, and experience with structured and unstructured data environments
- Advanced Microsoft Purview expertise: DLP, Information Protection, Insider Risk Management, Data Lifecycle Management, and DSPM
- Broad knowledge of data protection guidelines, industry trends, and emerging standards including Post-Quantum Cryptography (PQC)
- Strong cybersecurity engineering experience across Microsoft 365, Azure, Entra ID, and related cloud and identity platforms
- Hands-on experience with Microsoft Purview as primary data protection platform plus other DLP/data security solutions, with strong problem-solving skills
- Good communication, collaboration, and partner management skills for multi-functional teams
- SC-401 (Microsoft Certified: Information Security Administrator Associate) certification
Nice to have
- Additional certifications such as CISSP, CISM, or equivalent
- Experience in cloud security, hybrid environments, and regulatory standards including GDPR, HIPAA, and PCI-DSS
Full description
BAT is evolving at pace into a global multi-category business. Our purpose is to create A Better Tomorrow™ by Building a Smokeless World. To achieve our ambition, we are looking for colleagues who are ready to join us on this journey! Tomorrow can’t wait, let’s shape it together!
BAT DBS has an exciting opportunity for a Data Security Engineer in Selangor, Malaysia
ROLE SUMMARY:
What are the key objectives and expectations from this role?
- The Data Security Engineer is responsible for defining, implementing, and managing data protection practices across the BAT, with Microsoft Purview serving as the organization's primary Data Protection Platform. This role collaborates with application teams to classify sensitive information and ensure compliance with data security policies. Bringing tools like Microsoft Purview and some complementary data security tools into use, the engineer improves data visibility, governance, and protection in both structured and unstructured environments.
- This is a specialist engineering role: approximately 60% of the required technical knowledge must be in Microsoft Purview (including administration, configuration, and the underlying knowledge validated by the Microsoft Certified: Information Security Administrator Associate certification, exam SC-401), 20% in data protection principles more broadly and emerging trends and standards (e.g., Post-Quantum Cryptography), and 20% in engineering-side cybersecurity concepts spanning Microsoft 365, Azure, Entra ID, and related platforms.
What is the direct impact of this role on the team or organization?
Reports to: Data Security Manager
Number of Direct Reports: NA
Core Relationships: Data Privacy/Legal, IT Application Owners, Cloud/Identity Engineering (M365, Azure, Entra ID), Enterprise Architecture, Compliance & Risk, and Security Operations teams
Geographic Scope: Global
Travel Required: N/A
Your key responsibilities will include:
- Compose, build, and maintain data security solutions, including Data Loss Prevention (DLP), information protection, and data posture management, primarily bringing to bear Microsoft Purview (DLP, Information Protection, Insider Risk Management, Data Lifecycle Management, and Data Security Posture Management (DSPM)).
- Define and enforce data classification and protection standards in alignment with organizational policies.
- Implement and optimize configurations for Microsoft Purview and other data security tools to ensure maximum effectiveness.
- Solve complex data security issues and provide timely resolutions.