DLP Specialist

CPX; Abu Dhabi; On-site; AED 350,000 - 550,000; Full time

Job summary

CPX leads the Data Loss Prevention program across endpoint, network, email, Microsoft 365 and cloud environments. The role drives policy architecture, governance, incident oversight, tuning and exception management to reduce data leakage risk with minimal business disruption.

Candidates should demonstrate 7+ years in information security with enterprise DLP experience, a CS/IT degree, and relevant certifications. Collaboration with Legal, Privacy, HR, IT and business units is essential.

Qualifications

• 7+ years of information security experience with at least 5 years in enterprise DLP/data protection.
• Bachelor’s degree in computer science, cybersecurity, IT, information systems or engineering.
• Postgraduate information security qualification is advantageous.

Responsibilities

• Lead end-to-end DLP service delivery using Forcepoint DLP and Microsoft Purview across endpoints, networks, email and cloud.
• Translate business processes and regulatory obligations into DLP policies and enforcement actions.
• Design and govern detection logic using data classifications, patterns and fingerprinting.
• Define risk-based enforcement modes including monitor, coaching, quarantine and block.
• Review incidents, prioritize high-risk cases, and coordinate remediation with data owners.
• Lead false positives/negatives analysis and policy tuning to protect productivity.
• Manage DLP exceptions with documented justification and approvals.
• Coordinate policy rollout with Legal, Privacy, HR, IT and business units.
• Ensure integration with SIEM/SOAR, ITSM, CASB/SWG and incident response.
• Maintain service health, coverage, and audit-ready evidence; produce metrics.
• Mentor the DLP Engineer and QA policy changes and investigations.

Skills

Forcepoint DLP

Microsoft Purview

Information security

DLP policy enforcement

Regulatory compliance

Stakeholder engagement

Incident management

Team mentoring

ITIL

Communication

Education

Bachelor's degree in computer science or related field

Postgraduate qualification in information security (advantage)

Tools

SIEM/SOAR integration

Forcepoint DLP

Microsoft Purview

CASB/SWG

Job description

Lead the Data Loss Prevention service for the client across endpoint, network, email, Microsoft 365, cloud/SaaS and business workflows. The role is accountable for DLP policy architecture, governance, incident oversight, tuning, exception management, stakeholder engagement and measurable reduction of data leakage risk while minimizing business disruption.

Primary Responsibilities: -

• Lead end-to-end DLP service delivery using Forcepoint DLP and Microsoft Purview capabilities across endpoint, network, email and cloud channels.
• Translate business processes, regulatory obligations and data classification requirements into DLP policies, rules and enforcement actions.
• Design and govern detection logic using sensitive information types, regex, keywords, dictionaries, fingerprinting, EDM/IDM and label‑aware controls.
• Define risk‑based enforcement modes including monitor, user coaching, justification, quarantine and block, with safe rollback and phased deployment.
• Review DLP incidents and trends, prioritize high-risk cases, oversee investigation quality and coordinate remediation with data owners and stakeholders.
• Lead false‑positive/false‑negative analysis and policy tuning to improve precision while protecting business productivity.
• Manage DLP exceptions through documented justification, business‑owner approval, compensating controls, expiry and periodic recertification.
• Coordinate with Legal, Privacy, HR, IT, application owners and business units for policy rollout, investigations and user awareness.
• Ensure integration with SIEM/SOAR, ITSM, CASB/SWG, classification, DRM and incident response processes.
• Maintain service health, connector coverage, endpoint agent coverage, policy deployment status and operational backlogs.
• Produce daily/weekly operational metrics, monthly business reporting and quarterly executive insights covering incidents, tuning, exceptions and risk reduction.
• Maintain audit‑ready evidence, policy version control, test records, approvals, incident records and remediation trackers.
• Mentor the DLP Engineer and provide technical quality assurance for policy changes and investigations.

Skills / Certifications: -

• Forcepoint DLP Administrator/Professional training
• SC-400 Microsoft Information Protection Administrator
• CISSP, CISM or CISA (preferred)
• CDPSE or privacy/data protection certification (advantage)ITIL Foundation (advantage)
• Soft skills: Excellent written and verbal communication.
• Analytical thinking and problem solving and attention to detail and quality.
• Accountability and ownership.
• Teamwork and stakeholder collaboration.

Minimum Work Experience & Education: -

• 7+ years of information security experience, including at least 5 years in enterprise DLP/data protection
• Bachelor’s degree in computer science, Cybersecurity, Information Technology, Information Systems, Engineering or equivalent.
• Postgraduate qualification in information/cyber security is an advantage.