Data Security Engineer

Standard Bank Group is a leading Africa-focused financial services group, and an innovative player on the global stage, that offers a variety of career-enhancing opportunities – plus the chance to work alongside some of the sector’s most talented, motivated professionals. Our clients range from individuals, to businesses of all sizes, high net worth families and large multinational corporates and institutions. We’re passionate about creating growth in Africa. Bringing true, meaningful value to our clients and the communities we serve and creating a real sense of purpose for you.

We are seeking an experienced Data Security Engineer to implement, manage, and optimize enterprise data protection controls. The successful candidate will support the organisation’s data security strategy by managing Data Loss Prevention (DLP), email security, web security, and Secure Service Edge (SSE) technologies to safeguard sensitive information.

The role requires collaboration with Information Security, Infrastructure, Legal, Risk, and Compliance teams to ensure security policies align with regulatory requirements and internal standards.

Key Responsibilities

• Manage and optimize Microsoft Purview DLP policies across endpoints, SharePoint, OneDrive, and Teams.

• Investigate DLP alerts and support incident response while ensuring compliance with regulations such as POPIA, GDPR, and PCI-DSS.

• Administer and maintain Microsoft Defender for Office 365 security controls including anti-phishing, anti-malware, Safe Links, and Safe Attachments.

• Support and maintain Forcepoint Web Security policies including URL filtering and monitoring of web-based threats.

• Manage DMARC policies to protect organisational email domains from spoofing and impersonation.

• Configure and monitor Cato Networks SSE policies to enable secure internet access and support Zero Trust Network Access (ZTNA).

• Monitor and triage security alerts across DLP, email, web, and SSE platforms and escalate incidents when required.

• Produce security reports and maintain documentation to support audits and compliance requirements.

Type of Qualification: First Degree

Field of Study: Information Technology

 

Experience Required

• 5 - 8 years of experience in Information Security, with at least 2–3 years focused on Data Security or Data Loss Prevention (DLP) technologies.

• Hands-on experience implementing and supporting Microsoft Purview DLP across endpoints, SharePoint, OneDrive, and Microsoft Teams.

• Strong experience with Microsoft Defender for Office 365, including email threat protection, anti-phishing, and advanced threat policies.

• Experience managing web security platforms such as Forcepoint Web Security, including policy configuration and threat monitoring.

• Working knowledge of Secure Service Edge (SSE) and Zero Trust Network Access (ZTNA) concepts, with exposure to platforms such as Cato Networks advantageous.

• Experience investigating and responding to security alerts and incidents across DLP, email, and web security environments.

• Familiarity with SIEM platforms (e.g., Microsoft Sentinel) and security monitoring practices.

• Understanding of email authentication protocols including DMARC, SPF, and DKIM.

• Knowledge of data protection and regulatory frameworks such as POPIA, GDPR, and PCI-DSS.

• Strong analytical, problem-solving, and stakeholder communication skills.

Behavioural Competencies:

• Articulating Information
• Challenging Ideas
• Developing Expertise
• Developing Strategies
• Embracing Change
• Empowering Individuals
• Examining Information
• Exploring Possibilities
• Interacting with People
• Making Decisions
• Showing Composure
• Team Working

Technical Competencies:

• Incident and Problem Management
• Information Security Management
• IT Design Driven Development
• IT Knowledge
• Service Management Processes
• Technical Analysis
• Trouble Shooting
• Use of Build and Test Automation