Cyber Security Data Loss Prevention Analyst

About this role

Job Description

You will play a key role in protecting the organisation’s sensitive information by monitoring, investigating, and responding to data loss prevention incidents using Microsoft Purview and related security tooling. You will assess alerts, support incident handling, and work with colleagues and third parties to reduce data protection risks and improve controls.

Alongside your DLP responsibilities, you will also provide hands-on IT support to users within the Bishopthorpe office, helping to resolve technical issues and ensure a reliable local IT service. This will involve working closely with internal stakeholders, suppliers, and support partners to deliver practical, user-focused outcomes.

Responsibilities

• Monitoring data loss prevention alerts and incidents through Microsoft Purview and associated security tools, ensuring timely review, triage, investigation and resolution.
• Investigating potential data handling breaches, policy violations and suspicious activity, escalating issues where appropriate and supporting incident response activity.
• Analysing DLP events and trends to identify recurring issues, control gaps and opportunities to strengthen data protection arrangements.
• Assisting with the development, implementation and continuous improvement of DLP policies, rules and processes in line with organisational and regulatory requirements.
• Providing advice and guidance to users on the appropriate handling, sharing and protection of sensitive information.
• Liaising with internal stakeholders, managed service providers and third-party suppliers to support the investigation and resolution of security and data protection incidents.
• Producing clear and accurate records, reports and documentation relating to DLP incidents, user issues, remediation actions and service activity.
• Supporting local users within the Bishopthorpe office by providing first-line and second-line IT support for hardware, software, account access and general technical issues.
• Maintaining local IT equipment and end-user devices, ensuring they remain operational, secure and fit for purpose.
• Co-ordinating with wider IT teams and external support partners to resolve escalated issues and maintain continuity of service for local users.
• Assisting with the setup, installation, replacement and support of end-user devices and office-based IT equipment where required.
• Ensuring that all support activity is delivered in accordance with IT service standards, cyber security requirements, data protection obligations and organisational policies.
• Communicating effectively with users and stakeholders, providing clear updates, managing expectations and delivering a professional and customer-focused support service.
• Contributing to continuous service improvement by identifying opportunities to enhance user support, security monitoring and operational processes.
• Supporting other cyber security and IT operational activities as required by the needs of the team and wider department.

Essential

QUALIFICATIONS

Knowledge/Experience

• Experience of monitoring, investigating and responding to security or data-related incidents
• Experience of using Microsoft Purview, Data Loss Prevention tools, or similar security technologies
• Experience of providing hands-on IT support to end users in an office environment
• Experience of working with third-party suppliers and internal stakeholders to resolve technical issues
• Knowledge of data protection principles and the secure handling of sensitive information
• Experience of documenting incidents, support activity and remediation actions clearly and accurately

Skills & Abilities

• Ability to investigate, analyse and resolve technical and security-related issues in a structured manner
• Ability to prioritise workload and respond effectively to competing demands
• Strong communication skills, with the ability to explain technical matters clearly to non-technical users
• Ability to build effective working relationships with colleagues, users and external partners
• Good attention to detail and ability to handle sensitive or confidential information appropriately
• Ability to work independently whilst also contributing effectively as part of a wider team
• Strong customer service skills and a practical, user-focused approach to support

About Us

Please note that you will not be able to view the role description after the closing date. We suggest that you save a copy of this page before you submit your application.

About The NCIs

The National Church Institutions comprises a wide variety of teams, professions and functions that support the mission and ministries of the Church of England in its vision to be a church, centred on Jesus Christ, for the whole nation - a church that is simpler, humbler, bolder.

We Include. You Belong.

Our Belonging and Inclusion Strategy aims for everyone in the National Church Institutions (NCIs) to feel that they belong, and are valued for who they are and what they contribute. Together, our people contribute in different ways towards our common purpose, whichever NCI they work in and whatever their background.

Living out our values in all that we do, we

• Strive for Excellence
• Show Compassion
• Respect others
• Collaborate
• Act with Integrity

We believe our commitment to belonging and inclusion fuels our progress and drives us forward. The NCIs are a safe, inclusive workplace for people of all backgrounds and walks of life. We welcome applications from people of all faiths and of no faith. We want to encourage applications from a diverse group of people who share our values. Even if you have never thought about working for us before, if you have the skills and experience we’re looking for then we would like to hear from you.

Use of AI in your application

We appreciate that you may want to use AI tools to help you with your application. We're happy for you to use AI to come up with ideas and help structure your thoughts, but you shouldn't use AI to fabricate information or write your whole application for you. One of our values is integrity, and although we want you to demonstrate your best self, we don't want an AI-generated persona. If you simply copy and paste AI-generated content into your application, this will reduce your chances of success.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.