The Premier League
Data Security Engineer

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Application Deadline: 23 August 2026
Department: IT
Location: London, UK
Description
The Premier League is seeking a Data Security Engineer to help build and operate the organisation’s data security capability across Microsoft 365, SaaS, and cloud environments. This is a hands-on engineering role with significant scope for technical ownership and professional growth. The successful candidate will establish foundational data security capabilities from the ground up, a rare opportunity to own a greenfield capability at a high-profile organisation, supporting the Premier League's wider cloud, collaboration, and AI-enabled transformation programmes.
This role will focus on implementing and managing data classification, labelling, Data Loss Prevention (DLP), and Data Security Posture Management (DSPM) capabilities to improve the visibility, protection, and control of sensitive data across the organisation.
Working within the Information Security team, the role will play a key part in operationalising the Premier League’s newly approved Data Classification Policy and supporting the rollout of modern data protection controls across the business. The successful candidate will work closely with Information Security, IT, Legal, and business stakeholders to translate policy and regulatory requirements into practical technical controls.
Who We Are
The Premier League is home to some of the most competitive and compelling football in the world. The League and its Clubs use the power and popularity of the competition to inspire fans, communities and partners in the UK and across the world. The Premier League brings people together from all backgrounds. It is a competition for everyone, everywhere and is available to watch in over 1.2 billion homes in 189 countries.
We have a wide variety of responsibilities. These include organising the competition and its Handbook as well as managing the centralised broadcast and commercial rights. The work we do in conjunction with the Clubs also goes far beyond the 90 minutes. We support and provide a framework for youth development, we protect the organisation’s intellectual property, support the wider game and community programmes, undertake international development work and liaise with governing bodies and other leagues.
The Premier League is an equal opportunities employer and strives to create an inclusive culture where talent can flourish. We believe in the potential of everyone and open our doors to those who share those values. All appointments will be made based on merit; however, we particularly encourage applications from women, people from minority ethnic communities, LGBTQ+ people and disabled people. Our hybrid-working model also allows you some variety on your place of work, offering you the chance to work from home on some days each week. Where possible, you will attend the office or site visits in line with our company policy. All staff liaise closely with their line manager to manage their time appropriately and according to their work and team requirements.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
The role
Data security platform ownership
- Own the operational delivery and ongoing management of the Premier League’s data security tooling, including Microsoft Purview and Data Security Posture Management (DSPM) capabilities.
- Support the implementation and maturity of the organisation’s data classification, labelling, and data protection controls in line with Information Security standards and business requirements.
- Work closely with Information Security, IT, Legal, and business stakeholders to translate policy and regulatory requirements into practical technical controls.
Microsoft Purview & data protection
- Design, implement, and operate Microsoft Purview capabilities including Information Protection and Data Loss Prevention (DLP).
- Support the rollout and tuning of data classification and labelling across Microsoft 365 environments including SharePoint, OneDrive, Exchange, and Teams.
- Monitor and improve the effectiveness of DLP and data protection controls across endpoints, email, and cloud services.
- Support the secure adoption of collaboration and AI technologies by reducing data exposure risks and improving visibility of sensitive information.
DSPM & data visibility
- Own the technical implementation and day-to-day operational management of the organisation's DSPM platform.
- Build and maintain visibility of sensitive data across Microsoft 365, SaaS platforms, and cloud environments.
- Identify, investigate, and support remediation of data exposure risks, excessive permissions, and insecure data handling practices.
- Support integration of DSPM capabilities with the wider Microsoft security stack including Defender, Sentinel, and Purview.
Cloud & platform integration
- Work with Cloud Security and infrastructure teams to embed data protection controls into new and existing platforms and services.
- Support integration of data security tooling across Azure, AWS, SaaS, and other business systems.
- Contribute data security expertise to technical projects, cloud initiatives, and new technology deployments.
Incident support & operational security
- Provide subject matter expertise during investigations involving data loss, misuse, or exposure.
- Support monitoring, tuning, and operational response activities relating to data security alerts and incidents.
- Assist with continuous improvement of data security processes, workflows, and operational reporting.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Automation, reporting & engagement
- Develop and maintain reporting on data security metrics and control effectiveness.
- Automate operational and administrative tasks using PowerShell and native platform tooling where appropriate.
- Work collaboratively with technical and non-technical stakeholders to improve data handling practices and support adoption of security controls.
Requirements For The Role
- Strong hands-on experience with Microsoft Purview, including Information Protection and DLP capabilities.
- Experience implementing or supporting data classification and labelling within Microsoft 365 environments.
- Experience operating or tuning DLP controls across endpoint, email, and cloud environments.
- Understanding of data security challenges relating to SaaS platforms, cloud services, large-scale collaboration, and AI adoption.
- Familiarity with DSPM concepts or data discovery tooling; hands-on implementation experience desirable.
- Ability to translate security and compliance requirements into practical technical controls.
- Experience supporting investigations involving data loss, misuse, or insider risk scenarios.
- Working knowledge of Microsoft security technologies including Defender and Entra ID.
- Experience with scripting or automation using PowerShell or similar tooling.
- Comfortable working independently and taking ownership of operational technical platforms.
- Strong communication skills with the ability to engage both technical and non-technical stakeholders.
- Working knowledge of GDPR principles and risk-based security frameworks such as NIST CSF.
Our commitment to safeguarding includes implementing robust safer recruitment procedures to assess the suitability of individuals applying for roles that involve work with children and adults who are or may be at risk of harm. For further information, please see our Safeguarding Policy and Safer Recruitment Guidance.
To apply please visit our careers page and apply with your CV and a cover letter. The closing date for applications is 23 August 2026.
We will remove barriers that prospective candidates might face at any stage of our recruitment process. If you have a disability and would like the advert in an alternative format, or would like to talk about how we can adjust the interview process to best support you, please contact recruitment@premierleague.com.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location