Keep all work stuff contained in a (encrypted) virtual machine, that's what I do.
I work for a big enterprise, in a case like that, you seriously don't want sensitive company data on your personal PC, it's asking for troubles if you do.
Our company PCs are Windows, I got permission to install VIrtualbox so I can use Linux that's so much better for many things. I encrypted the VM I use for work, so I can keep a copy on my personal PC when I work at home, without any risk of data breaches.
The advantage of a VM is that it makes it very easy to separate work from home, you start it up when you work, you shut it down when you're done working and it doesn't "interfere" with your personal stuff that way.