A separate device. Work should be separated anyway, at a minimum you have access to confidential information from employee data to customer data to code to reports.

That your company doesn't provide this is... not on. And a problem for their compliance and legal departments.

In the mean time, get a burner Android device for $100-200 for anything work.