Job Purpose : -
Lead the Data Loss Prevention service for the client across endpoint, network, email, Microsoft 365, cloud/SaaS and business workflows. The role is accountable for DLP policy architecture, governance, incident oversight, tuning, exception management, stakeholder engagement and measurable reduction of data leakage risk while minimizing business disruption.
Primary Responsibilities: -
- Lead end-to-end DLP service delivery using Forcepoint DLP and Microsoft Purview capabilities across endpoint, network, email and cloud channels.
- Translate business processes, regulatory obligations and data classification requirements into DLP policies, rules and enforcement actions.
- Design and govern detection logic using sensitive information types, regex, keywords, dictionaries, fingerprinting, EDM/IDM and label-aware controls.
- Define risk-based enforcement modes including monitor, user coaching, justification, quarantine and block, with safe rollback and phased deployment.
- Review DLP incidents and trends, prioritize high-risk cases, oversee investigation quality and coordinate remediation with data owners and stakeholders.
- Lead false-positive/false-negative analysis and policy tuning to improve precision while protecting business productivity.
- Manage DLP exceptions through documented justification, business-owner approval, compensating controls, expiry and periodic recertification.
- Coordinate with Legal, Privacy, HR, IT, application owners and business units for policy rollout, investigations and user awareness.
- Ensure integration with SIEM/SOAR, ITSM, CASB/SWG, classification, DRM and incident response processes.
- Maintain service health, connector coverage, endpoint agent coverage, policy deployment status and operational backlogs.
- Produce daily/weekly operational metrics, monthly business reporting and quarterly executive insights covering incidents, tuning, exceptions and risk reduction.
- Maintain audit-ready evidence, policy version control, test records, approvals, incident records and remediation trackers.
- Mentor the DLP Engineer and provide technical quality assurance for policy changes and investigations.
Skills / Certifications: -
- Forcepoint DLP Administrator/Professional training
- SC-400 Microsoft Information Protection Administrator
- CISSP, CISM or CISA (preferred)
- CDPSE or privacy/data protection certification (advantage)
- ITIL Foundation (advantage)
- Soft skills: Excellent written and verbal communication.
- Analytical thinking and problem solving and attention to detail and quality.
- Accountability and ownership.
- Teamwork and stakeholder collaboration.
Minimum Work Experience & Education: -
- 7+ years of information security experience, including at least 5 years in enterprise DLP/data protection
- Bachelor’s degree in computer science, Cybersecurity, Information Technology, Information Systems, Engineering or equivalent.
- Postgraduate qualification in information/cyber security is an advantage.
