Data Security Engineer

BAT is evolving at pace into a global multi-category business. Our purpose is to create A Better Tomorrow™ by Building a Smokeless World.
To achieve our ambition, we are looking for colleagues who are ready to join us on this journey! Tomorrow can’t wait, let’s shape it together!

BAT DBS has an exciting opportunity for a Data Security Engineer in Selangor, Malaysia

ROLE SUMMARY:

What are the key objectives and expectations from this role? 

• The Data Security Engineer is responsible for defining, implementing, and managing data protection practices across the BAT, with Microsoft Purview serving as the organization's primary Data Protection Platform. This role collaborates with application teams to classify sensitive information and ensure compliance with data security policies. Bringing tools like Microsoft Purview and some complementary data security tools into use, the engineer improves data visibility, governance, and protection in both structured and unstructured environments.  
• This is a specialist engineering role: approximately 60% of the required technical knowledge must be in Microsoft Purview (including administration, configuration, and the underlying knowledge validated by the Microsoft Certified: Information Security Administrator Associate certification, exam SC-401), 20% in data protection principles more broadly and emerging trends and standards (e.g., Post-Quantum Cryptography), and 20% in engineering-side cybersecurity concepts spanning Microsoft 365, Azure, Entra ID, and related platforms.

What is the direct impact of this role on the team or organization?

Reports to

Data Security Manager

Number of Direct Reports

NA

Core Relationships

• Data Privacy/Legal
• IT Application Owners
• Cloud/Identity Engineering (M365, Azure, Entra ID)
• Enterprise Architecture
• Compliance & Risk, and Security Operations teams

Geographic Scope 

Global

Travel Required

N/A

Your key responsibilities will include:

• Compose, build, and maintain data security solutions, including Data Loss Prevention (DLP), information protection, and data posture management, primarily bringing to bear Microsoft Purview (DLP, Information Protection, Insider Risk Management, Data Lifecycle Management, and Data Security Posture Management (DSPM)).
• Define and enforce data classification and protection standards in alignment with organizational policies.
• Implement and optimize configurations for Microsoft Purview and other data security tools to ensure maximum effectiveness.
• Solve complex data security issues and provide timely resolutions.
• Collaborate with internal teams and external vendors to strengthen the organization’s overall security posture.
• Monitor and improve data governance practices to maintain compliance with regulatory and internal requirements.
• Continuously assess and enhance data security strategies to address emerging threats and technologies, including evolving data protection standards such as Post-Quantum Cryptography (PQC).
• Act as the team's subject-matter expert on Microsoft Purview, maintaining deep, current expertise aligned to the Microsoft SC-401 (Administering Information Security in Microsoft 365) certification.
• Apply working knowledge of engineering-side cybersecurity concepts across Microsoft 365, Azure, and Entra ID (e.g., identity and access management, conditional access, secure workload configuration) to strengthen data protection controls end-to-end.

What are we looking for?

• 5+ years of hands-on experience in data security and data protection engineering, with strong expertise in Microsoft Purview.

• Good understanding of data protection, information governance, compliance frameworks, and experience working with both structured and unstructured data environments.

• Advanced Microsoft Purview expertise, including Data Loss Prevention (DLP), Information Protection, Insider Risk Management, Data Lifecycle Management, and Data Security Posture Management (DSPM), aligned with SC-401 certification knowledge.

• Broad knowledge of data protection guidelines, industry trends, and emerging standards, including Post-Quantum Cryptography (PQC).

• Strong cybersecurity engineering experience across Microsoft 365, Azure, Entra ID, and related cloud and identity platforms.

• Hands-on experience with Microsoft Purview as the primary data protection platform, as well as other DLP and data security solutions, coupled with excellent solve and problem-solving skills.

• Good communication, collaboration, and partner management skills to work effectively across multi-functional teams.

• SC-401 (Microsoft Certified: Information Security Administrator Associate) certification required, with additional certifications such as CISSP, CISM, or equivalent considered advantageous; experience in cloud security, hybrid environments, and regulatory standards including GDPR, HIPAA, and PCI-DSS is highly desirable.

What we offer you?

• We offer a market leading annual performance bonus (subject to eligibility)
• Our range of benefits varies by country and includes diverse health plans, initiatives for work-life balance, transportation support, and a flexible holiday plan with additional incentives
• Your journey with us isn't limited by boundaries; it's propelled by your aspirations. Join us at BAT and become a part of an environment that thrives on internal advancement, where your career progression isn't just a statement – it's a reality we're eager to build together. Seize the opportunity and own your development; your next chapter starts here.
• You'll have access to online learning platforms and personalized growth programs to nurture your leadership skills
• We prioritise continuous improvement within a transformative environment, preparing for ongoing changes

WHY JOIN BAT?
We’re one of the few companies named as a Global Top Employer by the Top Employers Institute – certified in offering excellent employee conditions.

Collaboration, inclusion and partnership underpin everything we do here at BAT. We are looking forward to enabling every individual to thrive, regardless of gender, sexual orientation, marital or civil partnership status, gender reassignment, race, religion or belief, colour, nationality, ethnic or national origin, disability, age, skills, experience, education, socio-economic and professional background, veteran status, perspectives and thinking styles. We know that embracing talent from all backgrounds is what makes us stronger and best prepared to meet our business goals.

We see the career breaks as opportunities not obstacles. Through The Global Returners program, we support professionals looking to restart their careers after an extended absence from the workforce (e.g. time out caring for family, parental leave, national service, sabbatical and/or starting an own venture).

Come bring your difference and see what is possible for you at BAT. Learn more about our culture and our award winning employee experience here.

If you require any reasonable adjustments or accommodations to help you perform at your best during the recruitment process, you are encouraged to notify us. We are fully committed to support you by making appropriate arrangements for you to demonstrate your full potential.