Lead Specialist InfoSecOps- (DLP)

Role purpose

DLP service delivery

• Lead end-to-end DLP delivery using Forcepoint DLP and Microsoft Purview across endpoint, network, email, and cloud channels.
• Translate business processes, regulatory obligations, and data classifications into DLP policies, rules, and enforcement actions.
• Design detection logic using sensitive information types, regex, keywords, dictionaries, fingerprinting, EDM/IDM, and label-aware controls.
• Set risk-based enforcement modes, including monitoring, user coaching, justification, quarantine, and blocking, with safe rollback and phased deployment.
• Review incidents and trends, prioritize high-risk cases, oversee investigations, and coordinate remediation.
• Analyze false positives and negatives and tune policies to improve precision and protect productivity.
• Manage documented exceptions with business-owner approval, compensating controls, expiry, and recertification.
• Coordinate rollouts, investigations, and user awareness with Legal, Privacy, HR, IT, application owners, and business units.

Operations, reporting, and governance

• Integrate DLP with SIEM/SOAR, ITSM, CASB/SWG, classification, DRM, and incident response processes.
• Maintain service health, connector coverage, endpoint agent coverage, deployment status, and operational backlogs.
• Produce daily/weekly operational metrics, monthly business reporting, and quarterly executive insights.
• Maintain audit-ready evidence, policy version control, test records, approvals, incident records, and remediation trackers.
• Mentor the DLP Engineer and provide technical quality assurance for policy changes and investigations.

Experience and education

• At least 7 years of information security experience, including at least 5 years in enterprise DLP/data protection.
• Bachelor’s degree in computer science, cybersecurity, information technology, information systems, engineering, or equivalent.
• A postgraduate qualification in information or cybersecurity is advantageous.

Certifications and competencies

• Forcepoint DLP Administrator/Professional training and SC-400 are listed as qualifications.
• CISSP, CISM, or CISA is preferred; CDPSE or privacy/data protection certification and ITIL Foundation are advantageous.
• Strong written and verbal communication, analytical problem solving, attention to detail, accountability, teamwork, and stakeholder collaboration are listed.