Data Classification and DLP Engineer

Company Description

We are the world’s largest independent energy and commodities trading company. Every day we use our expertise and logistical networks to distribute energy around the world, efficiently and responsibly. From 40 offices worldwide, we seek to add value across the energy supply chain, including deploying our scale and market understanding to help facilitate the energy transition. To date, we have committed over $1 billion of capital to renewable projects, and are identifying and developing low-carbon opportunities around the world.

Our people are our business. Talent is precious to us and we create an environment in which individuals can reach their full potential, unhindered by hierarchy. Our team comprises more than 65 nationalities and we are committed to developing and sustaining a diverse work force. Learn more about us here.

Job Description

The Data Protection & DLP Engineer is responsible for designing, implementing, and maintaining the organisation’s data classification, data protection, and Data Loss Prevention (DLP) capabilities. Operating within the Cyber Security team and reporting directly to the CISO, this role ensures that sensitive data is correctly identified, labelled, monitored, and protected across the enterprise. The position requires strong analytical skills, deep technical expertise with DLP technologies, and the ability to collaborate with business stakeholders to translate regulatory and business requirements into effective security controls.

Key Responsibilities

• Analyse business requirements, regulatory constraints, and operational workflows to determine data classification and protection needs
• Develop and maintain a comprehensive data classification framework aligned with organisational risk appetite and industry best practices
• Collaborate with business owners to ensure accurate mapping of data types to classification levels.
• Design and implement data labelling and protection policies using, ensuring alignment with business requirements and approved security standards
• Create, fine-tune, and maintain automated policies for data discovery, labelling, encryption, and access control
• Configure the DLP tools to enforce data classification standards across web, email, cloud, and endpoint channels
• Oversee continuous tuning and optimisation of DLP systems to reduce false positives and ensure effective detection
• Manage daily DLP alerts and cases, ensuring timely investigation, triage, documentation, and resolution.
• Provide metrics, reporting, and insights to the CISO and leadership team regarding DLP activity, trends, and risk areas
• Conduct regular training and awareness sessions for employees to promote best practices in data handling and prevent data leakage

Qualifications

Additional Information