Requirements
The DLP Specialist will lead the Data Loss Prevention service across endpoint, network, email, Microsoft 365, cloud/SaaS, and business workflows. Responsibilities include DLP policy architecture, governance, incident oversight, tuning, exception management, stakeholder engagement, and reducing data leakage risk. Requires 7+ years of information security experience, with at least 5 years in enterprise DLP/data protection, and a Bachelor's degree in a relevant field. Postgraduate qualification in information/cyber security is an advantage.
Description
Job Purpose : -Lead the Data Loss Prevention service for the client across endpoint, network, email, Microsoft 365, cloud/SaaS and business workflows. The role is accountable for DLP policy architecture, governance, incident oversight, tuning, exception management, stakeholder engagement and measurable reduction of data leakage risk while minimizing business disruption.Primary Responsibilities: -Lead end-to-end DLP service delivery using Forcepoint DLP and Microsoft Purview capabilities across endpoint, network, email and cloud channels.Translate business processes, regulatory obligations and data classification requirements into DLP policies, rules and enforcement actions.Design and govern detection logic using sensitive information types, regex, keywords, dictionaries, fingerprinting, EDM/IDM and label-aware controls.Define risk-based enforcement modes including monitor, user coaching, justification, quarantine and block, with safe rollback and phased deployment.Review DLP incidents and trends, prioritize high-risk cases, oversee investigation quality and coordinate remediation with data owners and stakeholders.Lead false-positive/false-negative analysis and policy tuning to improve precision while protecting business productivity.Manage DLP exceptions through documented justification, business-owner approval, compensating controls, expiry and periodic recertification.Coordinate with Legal, Privacy, HR, IT, application owners and business units for policy rollout, investigations and user awareness.Ensure integration with SIEM/SOAR, ITSM, CASB/SWG, classification, DRM and incident response processes.Maintain service health, connector coverage, endpoint agent coverage, policy deployment status and operational backlogs.Produce daily/weekly operational metrics, monthly business reporting and quarterly executive insights covering incidents, tuning, exceptions and risk reduction.Maintain audit-ready evidence, policy version control, test records, approvals, incident records and remediation trackers.Mentor the DLP Engineer and provide technical quality assurance for policy changes and investigations.Skills / Certifications: -Forcepoint DLP Administrator/Professional trainingSC-400 Microsoft Information Protection AdministratorCISSP, CISM or CISA (preferred)CDPSE or privacy/data protection certification (advantage)ITIL Foundation (advantage)Soft skills: Excellent written and verbal communication.Analytical thinking and problem solving and attention to detail and quality.Accountability and ownership.Teamwork and stakeholder collaboration.Minimum Work Experience & Education: -7+ years of information security experience, including at least 5 years in enterprise DLP/data protection Bachelor's degree in computer science, Cybersecurity, Information Technology, Information Systems, Engineering or equivalent.Postgraduate qualification in information/cyber security is an advantage.