DLP Specialist

Job Summary :

Key Responsibilities :

DLP Strategy and Implementation :

- Design and implement enterprise-wide DLP policies, workflows, and controls to prevent unauthorized data exposure.

- Assist in selecting and deploying DLP solutions that align with business and security needs.

- Develop and manage DLP deployment and tuning plans in coordination with stakeholders.

Monitoring and Response :

- Perform forensic analysis and root cause analysis of DLP incidents.

- Work with SOC and threat intelligence teams to correlate DLP alerts with other security incidents.

Policy and Rule Creation :

- Classify sensitive information (e.g., PII, PHI, PCI) using automated and manual processes.

- Continuously refine policies to reduce false positives while maintaining effectiveness.

Data Classification and Protection :

- Implement data classification schemes and enforce tagging across the organization.

Governance, Risk, and Compliance :

- Participate in audits and risk assessments related to data protection.

- Prepare reports and metrics for leadership, regulators, and auditors.

Cross-functional Collaboration :

- Conduct awareness sessions and provide training to employees on DLP policies and procedures.

Tool Administration & Maintenance :

- Perform upgrades, patches, and system tuning to ensure optimal performance of the DLP infrastructure.

Required Skills & Qualifications :

- 3- 7 years of experience in Information Security with at least 2 years focused on DLP.

- Hands-on experience with one or more leading DLP platforms (e.g., Symantec DLP, Microsoft Purview, Forcepoint, Digital Guardian, McAfee, etc.).

- Solid understanding of network protocols, email systems, cloud platforms (e.g., Office 365, AWS, Azure), and endpoint security.

- Knowledge of regulatory requirements (GDPR, HIPAA, CCPA, PCI-DSS, etc.).

- Experience with scripting and automation (PowerShell, Python, Bash) is a plus.

- Strong analytical, problem-solving, and communication skills.

- Relevant certifications preferred (e.g., CISSP, CISM, CEH, GIAC, CompTIA Security+).

Nice-to-Have Skills :

- Familiarity with data discovery tools and methods (e.g., Varonis, Spirion).

- Exposure to cloud DLP tools (e.g., Microsoft Defender for Cloud Apps, Netskope, etc.).