DLP Specialist

Job Summary

We are seeking an experienced Data Loss Prevention (DLP) Specialist with over 5 years of expertise in designing, implementing, and maintaining data protection frameworks. The ideal candidate will develop and manage a robust Microsoft data classification and DLP framework to ensure data is categorized and secured based on sensitivity and impact levels. This role involves close collaboration with stakeholders to ensure compliance with regulatory requirements, organizational policies, and data protection regulations while providing training and support to employees and service teams.

Roles & Responsibilities

• Framework Development:
• Design, implement, and maintain a Microsoft data classification and DLP framework to categorize data based on sensitivity and impact levels.
• Ensure the framework aligns with industry best practices, regulatory requirements, and organizational policies.
• Policy Design and Enforcement:
• Develop and enforce DLP policies to prevent unauthorized data sharing, data breaches, and exfiltration.
• Continuously monitor and update policies to adapt to evolving security threats and compliance requirements.
• Regulatory Compliance:
• Ensure adherence to data protection regulations such as GDPR, HIPAA, and PCI-DSS, as well as internal security policies.
• Conduct regular audits to validate compliance and identify areas for improvement.
• Data Monitoring and Incident Response:
• Monitor and analyze data flows to detect potential data loss incidents.
• Investigate incidents, perform root cause analyses, and implement mitigation strategies to minimize risks.
• Training and Awareness:
• Provide training and support to employees on data classification policies and procedures.
• Deliver targeted training sessions for service desk teams to enhance their understanding of DLP and data classification policies.
• Collaboration:
• Partner with cross-functional teams, including IT, compliance, and business units, to understand data usage patterns and protection needs.
• Work closely with stakeholders to integrate DLP solutions seamlessly into business processes.

Key Skills

• Technical Expertise:
• Proficiency in Microsoft DLP solutions (e.g., Microsoft Purview, M365 Compliance Center, Azure Information Protection).
• Experience with data discovery, classification tools, and other DLP platforms (e.g., Symantec, McAfee, Forcepoint).
• Regulatory Knowledge:
• Strong understanding of GDPR, HIPAA, PCI-DSS, and other relevant data protection regulations.
• Familiarity with organizational security frameworks and standards.
• Security and Compliance:
• Hands-on experience with data security best practices, including encryption, access controls, and secure data handling.
• Ability to design and enforce policies that balance security with operational efficiency.
• Analytical Skills:
• Strong analytical mindset to monitor data flows, detect potential risks, and respond to incidents effectively.
• Proficiency in using analytics tools to identify trends and vulnerabilities.
• Communication and Training:
• Ability to design and deliver training programs tailored to diverse audiences.
• Strong communication skills to collaborate with technical and non-technical stakeholders.
• Certifications (Preferred):
• Certified Information Systems Security Professional (CISSP).
• Certified Data Privacy Solutions Engineer (CDPSE).
• Microsoft Certified: Azure Security Engineer Associate.