Location
London

Hours
Full Time

Salary
Competitive salary offered

About the Role
Start date: 14th September 2026. Bridewell is one of the most exciting prospects in the UK cyber security sector, specialising in protecting and transforming critical business functions for some of the world’s most trusted organisations. As a leading cyber security services company, Bridewell is the trusted partner for operators of essential services, providing end-to-end cyber security capabilities that help clients operate safely and securely. Bridewell holds the Gold level Investors in People award, reflecting the outstanding calibre of its team.

The Bridewell Academy integrates Cyber Security Consulting expertise with hands-on training in Data Security and Data Protection, equipping candidates with practical skills to succeed in today’s cyber security landscape. This pathway combines structured learning, industry-recognised certifications, and real-world client delivery, preparing candidates for careers in Data Loss Prevention (DLP), Data Privacy, and Microsoft Security technologies.

In the first six months, you will build a strong operational foundation through structured onboarding and immersive exposure to live client environments. You will shadow DLP projects, gaining hands-on experience in alert triage, incident analysis, and response within Microsoft Purview and Defender. From month two, you will transition into full-time client delivery, contributing to alert and incident management activities and developing the capability to triage high volumes of alerts daily. Alongside this, you will complete Microsoft Applied Skills training in Information Protection, Data Loss Prevention, eDiscovery, Retention, and Communication Compliance.

Between six and twelve months, you will deepen your delivery capability in a fully billable role focused on alert and incident management, stakeholder communications, and DLP analysis. You will also develop a broader understanding of how DLP intersects with Data Privacy and Security, supporting incident escalation and embedding privacy considerations. During this phase, you will complete the CISMP certification to strengthen your knowledge of core information security principles.

From twelve to eighteen months, your role will evolve to include advanced responsibilities across technical delivery and consulting. You will manage alerts and incidents, contribute to proactive DLP analysis, policy configuration and optimisation within Microsoft Purview, and continuous improvement initiatives. You will engage in wider consulting activities such as supporting discovery workshops, drafting client communications, and delivering training. Completion of Core Consulting Training will develop your client-facing and stakeholder management skills, while achieving the SC-401 Microsoft Information Protection Administrator certification will validate your technical expertise.

By the end of the programme, you will be a well-rounded consultant combining strong technical capability in DLP and Microsoft Security technologies with practical client delivery experience and core consulting skills, culminating in graduation from the Bridewell Academy.

Responsibilities
- Triage and investigate Data Loss and Insider Risk alerts using Microsoft Purview and Defender
- Support regular reporting to clients, identifying areas for continuous improvement and managing KPIs
- Support data incident and breach investigations, assessments, and escalations
- Engage with client staff through communications to support positive data handling practices
- Facilitate transition of Purview projects from Purview Engineers to the Managed Service
- Assist with documentation of workflows and processes for triaging, investigation, and escalation of alerts and incidents
- Provide basic support and advice on data security and protection matters
- Contribute to preparing and delivering training, awareness, and communication programs
- Support identification and mitigation of risks and opportunities for fine-tuning
- Stay updated on privacy and Microsoft Purview requirements through research and attending relevant conferences and training days
- Assist Senior Lead and Principal Consultants with project delivery
- Help with business development tasks such as creating blogs, marketing materials, and supporting tenders and proposals

Experience
No prior work experience is required as this is an entry-level position. We are looking for candidates who demonstrate potential through transferable skills, confidence, relationship building, and a self-starter mentality.

About you
You should be eager to learn, motivated, and able to build strong relationships. A proactive attitude and enthusiasm for cyber security and data privacy are essential.

Qualifications
- Minimum grade 4/C in GCSE English Language and Maths (or equivalent)
- Preferred: A degree in Cyber Security or Data Privacy, an equivalent qualification such as a Level 3 Apprenticeship, or completion of a Cyber Security or Data Privacy-focused training course or bootcamp
- Must be available to commence work on 14th September 2026