Lead Specialist InfoSecOps- (DLP)

Tanqeeb; Abu Dhabi; On-site; AED 300,000 - 460,000; Full time

Job summary

Tanqeeb in United Arab Emirates seeks a senior information security leader to own the DLP program across endpoints, emails, networks and cloud platforms. You will architect policies, govern incidents, and drive risk reduction with minimal business disruption.

Responsibilities include leading detection design, enforcing modes, coordinating with Legal, Privacy, HR and IT, and mentoring a DLP engineer while ensuring SIEM/SOAR integration and audit-ready governance.

Qualifications

• 7+ years in information security with 5+ years in enterprise DLP.
• Bachelor’s degree in computer science, cybersecurity, IT, information systems or engineering.
• Postgraduate qualification in information/cyber security is an advantage.

Responsibilities

• Lead end-to-end DLP delivery across endpoint, network, email and cloud.
• Translate regulatory obligations into DLP policies and controls.
• Design detection logic using sensitive information types, regex, and keywords.
• Define risk-based enforcement modes: monitor, coaching, quarantine and block.
• Review incidents, oversee investigations and remediation with owners.
• Tune policies to reduce false positives/negatives while preserving productivity.
• Manage DLP exceptions with justification, approvals and expiries.
• Coordinate policy rollout with Legal, Privacy, HR, IT and business units.
• Ensure integration with SIEM/SOAR, ITSM and CASB/SWG.

Skills

Forcepoint DLP

SC-400

CISSP/CISM/CISA

CDPSE

ITIL Foundations

Education

Bachelor’s degree in CS/IT/IS

Postgraduate in information security (advantage)

Tools

SIEM/SOAR

CASB/SWG

EDR/Endpoint security

Job description

Job Purpose : -

Lead the Data Loss Prevention service for the client across endpoint, network, email, Microsoft 365, cloud/SaaS and business workflows. The role is accountable for DLP policy architecture, governance, incident oversight, tuning, exception management, stakeholder engagement and measurable reduction of data leakage risk while minimizing business disruption.

Primary Responsibilities: -

• Lead end-to-end DLP service delivery using Forcepoint DLP and Microsoft Purview capabilities across endpoint, network, email and cloud channels.
• Translate business processes, regulatory obligations and data classification requirements into DLP policies, rules and enforcement actions.
• Design and govern detection logic using sensitive information types, regex, keywords, dictionaries, fingerprinting, EDM/IDM and label-aware controls.
• Define risk-based enforcement modes including monitor, user coaching, justification, quarantine and block, with safe rollback and phased deployment.
• Review DLP incidents and trends, prioritize high-risk cases, oversee investigation quality and coordinate remediation with data owners and stakeholders.
• Lead false-positive/false-negative analysis and policy tuning to improve precision while protecting business productivity.
• Manage DLP exceptions through documented justification, business-owner approval, compensating controls, expiry and periodic recertification.
• Coordinate with Legal, Privacy, HR, IT, application owners and business units for policy rollout, investigations and user awareness.
• Ensure integration with SIEM/SOAR, ITSM, CASB/SWG, classification, DRM and incident response processes.
• Maintain service health, connector coverage, endpoint agent coverage, policy deployment status and operational backlogs.
• Produce daily/weekly operational metrics, monthly business reporting and quarterly executive insights covering incidents, tuning, exceptions and risk reduction.
• Maintain audit-ready evidence, policy version control, test records, approvals, incident records and remediation trackers.
• Mentor the DLP Engineer and provide technical quality assurance for policy changes and investigations.

Skills / Certifications: -

• Forcepoint DLP Administrator/Professional training
• SC-400 Microsoft Information Protection Administrator
• CISSP, CISM or CISA (preferred)
• CDPSE or privacy/data protection certification (advantage)
• ITIL Foundation (advantage)
• Soft skills: Excellent written and verbal communication.
• Analytical thinking and problem solving and attention to detail and quality.
• Accountability and ownership.
• Teamwork and stakeholder collaboration.

Minimum Work Experience & Education: -

• 7+ years of information security experience, including at least 5 years in enterprise DLP/data protection
• Bachelor’s degree in computer science, Cybersecurity, Information Technology, Information Systems, Engineering or equivalent.
• Postgraduate qualification in information/cyber security is an advantage.