Data Loss Prevention Specialist (Contract)

Job Responsibilities

High-Value Asset Governance & Identification

• Engage business and control functions to identify and inventory potential HVAs, such as audit reports, inspection materials, network infrastructure diagrams, system architecture/security documentation, source code and other highly sensitive information.
• Analyse existing HVA submissions and rationalise overly broad or granular classifications.
• Develop consistent criteria for identifying and categorising which HVAs are suitable for DLP monitoring across APAC offices and functions.
• Translate HVAs into technically implementable detection methodology, including keywords, dictionaries, sensitivity labels, classifiers or other appropriate detection mechanisms.
• Assess false-positive and false-negative implications before implementation and support controlled testing and tuning.
• Establish traceability from identified information risk or HVA through to DLP detection logic, control response and monitoring.

DLP Business & Technical Analysis

• Act as the bridge between business/risk requirements and technical implementation.
• Understand Microsoft Purview DLP concepts, including policies, rules, conditions, exceptions, sensitive information types, sensitivity labels and policy tips.
• Analyze DLP alerts and rule performance to identify areas for tuning and enhancement.
• Understand information flows across email endpoints and other relevant transmission channels.
• Facilitate discussions between business stakeholders and technical engineers where requirements cannot be implemented directly.
• Challenge requirements where proposed DLP controls are impractical, overly broad or likely to create excessive business disruption.
• Assist in determining appropriate control responses such as monitoring, user warning, justification, and blocking or escalation.
• Document business and functional requirements in a manner that can be readily translated into technical configuration.

Overall DLP Governance and Project Management

• Support strategic DLP transformation initiatives, including hands-on support to enable smooth implementation of Phase 3 Microsoft Purview DLP for in-scope countries.
• Support the team in overall project management, including maintaining clear project documentation and audit trails, coordinating working groups and stakeholder meetings to drive follow-up actions, preparation of project status reporting and management updates.

Requirement

• Approximately five to eight years of relevant experience in DLP, information protection, information security, data protection, technology risk or a closely related discipline.
• Strong functional experience with Microsoft Purview DLP including practical experience in policy design, requirements, testing, tuning and effectiveness assessment.
• Good knowledge of DLP coverage across email, endpoint, web and other channels.
• Experience in handling HVA /supporting data-classification programmes, designing, tuning or testing DLP policies, SITs, classifiers, labels or document-fingerprinting approaches.
• Strong analytical, stakeholder management, presentation and communication skills.
• Good proactive working attitude, ability to work cohesively as a team and drive outcomesindependently.