Lead Specialist InfoSecOps- (DLP)

CPX; Abu Dhabi; On-site; AED 300,000 - 520,000; Full time

Job summary

CPX is seeking a senior Data Loss Prevention leader in Abu Dhabi to oversee end-to-end DLP services across endpoints, networks, email and cloud platforms. You will architect policies, govern detections, and manage incidents while coordinating with Legal, Privacy and IT teams to minimize data leakage risk with minimal business disruption.

The role requires 7+ years in information security with 5+ years in enterprise DLP, a relevant bachelor’s degree and ideally postgraduate information security

Qualifications

• 7+ years of information security experience, including at least 5 years in enterprise DLP/data protection.
• Bachelor’s degree in computer science, Cybersecurity, Information Technology, Information Systems, Engineering or equivalent.
• Postgraduate qualification in information/cyber security is an advantage.

Responsibilities

• Lead end-to-end DLP service delivery using Forcepoint DLP and Microsoft Purview capabilities across endpoint, network, email and cloud channels.
• Translate business processes, regulatory obligations and data classification requirements into DLP policies, rules and enforcement actions.
• Design and govern detection logic using sensitive information types, regex, keywords, dictionaries, fingerprinting, EDM/IDM and label-aware controls.
• Define risk-based enforcement modes including monitor, user coaching, justification, quarantine and block, with safe rollback and phased deployment.
• Review DLP incidents and trends, prioritize high-risk cases, oversee investigation quality and coordinate remediation with data owners and stakeholders.
• Lead false-positive/false-negative analysis and policy tuning to improve precision while protecting business productivity.
• Manage DLP exceptions through documented justification, business-owner approval, compensating controls, expiry and periodic recertification.
• Coordinate with Legal, Privacy, HR, IT, application owners and business units for policy rollout, investigations and user awareness.
• Ensure integration with SIEM/SOAR, ITSM, CASB/SWG, classification, DRM and incident response processes.
• Maintain service health, connector coverage, endpoint agent coverage, policy deployment status and operational backlogs.
• Produce daily/weekly operational metrics, monthly business reporting and quarterly executive insights covering incidents, tuning, exceptions and risk reduction.
• Maintain audit-ready evidence, policy version control, test records, approvals, incident records and remediation trackers.
• Mentor the DLP Engineer and provide technical quality assurance for policy changes and investigations.

Skills

Forcepoint DLP

Microsoft Purview

DLP governance

Incident management

Policy tuning

SIEM/SOAR integration

ITIL Foundation

Communication

Stakeholder collaboration

Education

Bachelor's degree in Computer Science / Cybersecurity / IT / Information Systems or equivalent

Postgraduate qualification in information/cyber security (advantage)

Tools

EDM/IDM

CASB/SWG

ITSM integration

Job description

Lead the Data Loss Prevention service for the client across endpoint, network, email, Microsoft 365, cloud/SaaS and business workflows. The role is accountable for DLP policy architecture, governance, incident oversight, tuning, exception management, stakeholder engagement and measurable reduction of data leakage risk while minimizing business disruption.

Primary Responsibilities: -

• Lead end-to-end DLP service delivery using Forcepoint DLP and Microsoft Purview capabilities across endpoint, network, email and cloud channels.
• Translate business processes, regulatory obligations and data classification requirements into DLP policies, rules and enforcement actions.
• Design and govern detection logic using sensitive information types, regex, keywords, dictionaries, fingerprinting, EDM/IDM and label-aware controls.
• Define risk-based enforcement modes including monitor, user coaching, justification, quarantine and block, with safe rollback and phased deployment.
• Review DLP incidents and trends, prioritize high-risk cases, oversee investigation quality and coordinate remediation with data owners and stakeholders.
• Lead false-positive/false-negative analysis and policy tuning to improve precision while protecting business productivity.
• Manage DLP exceptions through documented justification, business-owner approval, compensating controls, expiry and periodic recertification.
• Coordinate with Legal, Privacy, HR, IT, application owners and business units for policy rollout, investigations and user awareness.
• Ensure integration with SIEM/SOAR, ITSM, CASB/SWG, classification, DRM and incident response processes.
• Maintain service health, connector coverage, endpoint agent coverage, policy deployment status and operational backlogs.
• Produce daily/weekly operational metrics, monthly business reporting and quarterly executive insights covering incidents, tuning, exceptions and risk reduction.
• Maintain audit-ready evidence, policy version control, test records, approvals, incident records and remediation trackers.
• Mentor the DLP Engineer and provide technical quality assurance for policy changes and investigations.

Skills / Certifications: -

• Forcepoint DLP Administrator/Professional training
• SC-400 Microsoft Information Protection Administrator
• CISSP, CISM or CISA (preferred)
• CDPSE or privacy/data protection certification (advantage)
• ITIL Foundation (advantage)
• Soft skills: Excellent written and verbal communication.
• Analytical thinking and problem solving and attention to detail and quality.
• Accountability and ownership.
• Teamwork and stakeholder collaboration.

Minimum Work Experience & Education: -

• 7+ years of information security experience, including at least 5 years in enterprise DLP/data protection
• Bachelor’s degree in computer science, Cybersecurity, Information Technology, Information Systems, Engineering or equivalent.
• Postgraduate qualification in information/cyber security is an advantage.