Data Loss Prevention (DLP) Analyst
Role details
Job location
Tech stack
Job description
We're looking for a Data Loss Prevention (DLP) Analyst (known internally as an Information Security Analyst) to join our Insurance Money and Services team. The DLP team help protect sensitive organisational data from unauthorised access, loss or misuse. They monitor data transfer activities, manage DLP controls and policies, support users in handling data securely and work with Technology to strengthen protections and ensure compliance with internal security standards and regulations. What you'll be doing
-
Work with 3rd party technology service provider to ensure that DLP monitoring and operational activities are delivered in line with agreed standards and service levels.
-
Manage, triaging, and investigating Data Loss Prevention (DLP) incidents across endpoints, email, cloud apps, and collaboration platforms.
-
Help increase maturity of the organisation's DLP capability, including improving detection rules and strengthening response workflows.
-
Collaborate with wider Security Operations teams to support incident response, threat analysis, and ongoing security monitoring.
-
Work closely with business units to educate users, improve data handling behaviour, implement & refine DLP policies & rules and reduce false positives.
-
Produce reports, dashboards, and insights on data protection trends, risk patterns, and control effectiveness.
Requirements
-
Experience working with DLP platforms (e.g., Microsoft Purview DLP, Endpoint DLP, Cloud App Governance, or similar).
-
Strong analytical and investigative skills with the ability to interpret alerts, logs, and user behaviour.
-
Understanding of information security principles, data classification, compliance requirements, and insider risk concepts.
-
Ability to communicate effectively with both technical and non technical stakeholders, especially during incident analysis.
-
Experience creating documentation-playbooks, SOPs, user guidance, and incident reports
-
Strong attention to detail with the ability to follow and maintain structured processes but also with a curious mind, being able to appropriately challenge and identify opportunities to continuously improve
-
Experience working in a technology environment, working in partnership with business stakeholders
-
A passion for Cyber Security and a drive to learn more about it
And if you have any of these, even better
-
Experience working in a regulated environment such as insurance or financial services
-
Hands on experience with Microsoft Defender XDR, Sentinel, or SIEM/SOAR tooling.
-
Knowledge of KQL, PowerShell, or automation workflows to improve alerting and investigation efficiency.
-
Exposure to broader security domains such as identity security, endpoint protection, cloud security, or vulnerability management.
-
Familiarity with frameworks such as NIST, ISO 27001, or CIS Controls, particularly around data protection.
-
Experience contributing to security programme maturity-optimising controls, supporting audits, or designing new security use cases.
Benefits & conditions
Office Attendance - Our roles are hybrid; however, you should be able to travel to our Edinburgh office, 1-2 days per week for this position., We don't expect you to tick every box, and if you feel you hit most of the brief, it's worth exploring to further develop your career here with us. What's in it for you
-
Prepare for your retirement with our colleague pension scheme.
-
Performance related annual bonus.
-
Indulge in a generous holiday allowance with a minimum of 7.2 weeks, with the opportunity to buy more.
-
Embrace the benefits of our Colleague Clubcard, enjoy a 10% discount that increase to 15% every payday. As an added perk, we'll give you a second card to share with someone else.
-
Benefit from our family-oriented initiatives, encompassing enhanced maternity leave pay, a shared parental leave policy, and a generous 8-week paid paternity leave.
-
A place to get on - take advantage of our ongoing learning opportunities and award-winning training, to help you achieve the job and career you want.