DLP operation Lead

Role & responsibilities

• Core DLP Technical Skills
• Handson experience with Data Loss Prevention (DLP) solutions (e.g., Zscaler, Microsoft Purview DLP, Symantec, Forcepoint etc. )
• Strong understanding of data classification, labelling, and sensitivity types (PII, PCI, PHI, IP)
• Policy creation, tuning, and optimization for endpoint, email, cloud, and network DLP
• Incident investigation, alert triage, and falsepositive reduction
• Knowledge of data discovery and data flow mapping
• Endpoint, Cloud & Email Security
• Endpoint security controls (USB control, clipboard, print, screen capture)
• Email security and data exfiltration controls
• Cloud security concepts (M365, SharePoint, OneDrive, Teams, Exchange)
• Integration with CASB / Defender / EDR tools (where applicable)
• Operations & Incident Management
• Lead DLP operations including monitoring, incident response, and escalation
• Ability to assess risk and determine business impact of data leakage incidents
• Define and track SLAs, KPIs, and response timelines
• Coordinate with SOC, IT, Legal, Compliance, and Business teams during incidents
• Governance, Risk & Compliance
• Understanding of regulatory requirements (GDPR, ISO 27001, SOX, HIPAA as applicable)
• Alignment of DLP controls with organizational policies and playbooks
• Support audits, compliance reviews, and management reporting
• Leadership & Stakeholder Skills
• Act as point of contact / lead for DLP operations
• Mentor junior analysts and review their investigations
• Clear communication with technical and nontechnical stakeholders
• Experience handling business exceptions and risk acceptance
• Process & Documentation
• Creation and maintenance of runbooks, SOPs, and response playbooks
• Continuous improvement of DLP processes and workflows
• Strong documentation and reporting skills
• Soft Skills
• Analytical and problemsolving mindset
• Ability to work under pressure during incidents
• Ownership, accountability, and decisionmaking capability
• Willingness to work onsite and in shiftbased environments (if applicable)

Preferred candidate profile