Cyber Defense Lead: DLP & URL Filtering

Invesco Ltd.; Charlottetown; Hybrid; CAD 60,000 - 65,000; Full time

Benefits offered by this job

Hybrid working environment

RRSP Contributions

Health & Wellness Benefits

Work flexibility Programs

Parental Leave Benefits

Study Support

Job summary

Invesco Ltd. in Charlottetown, PEI, is seeking an experienced Cyber Defense Operations Professional to lead Microsoft DLP monitoring, triage alerts, and manage URL Filtering profiles.

You will coordinate with Insider Risk, Incident Response, and Legal/Compliance to address high‑risk events. The role requires 5+ years in cybersecurity operations, hands‑on Palo Alto URL Filtering and Microsoft DLP experience, and strong change management skills.

Qualifications

• 5+ years of experience in cybersecurity operations, data protection, DLP operations, proxy governance, security operations, or incident handling; prior lead or senior analyst experience is preferred.
• Hands‑on experience with Palo Alto URL Filtering profile management, including Panorama/NGFW or Prisma Access/SASE policy changes, URL categories, security profiles, whitelisting/blacklisting governance, troubleshooting, validation, and rollback support.
• Hands‑on experience with Microsoft DLP operations, including alert triage, investigation, evidence collection, dispositioning, escalation, reporting, and operational tuning recommendations.

Responsibilities

• Lead day-to-day Microsoft DLP monitoring operations, including queue management, prioritization, SLA tracking, quality review, and escalation oversight.
• Guide Analysts during alert triage, evidence collection, case documentation, and true positive versus false positive validation across email, endpoint, Teams, SharePoint, OneDrive, and cloud activity where applicable.
• Own operational escalation for confirmed, high-risk, repeat, or sensitive data loss events and coordinate with Insider Risk, Incident Response, DLP Engineering, Legal/Compliance, and business stakeholders as needed.
• Identify recurring false positives, noisy DLP rules, URL filtering policy friction, data classification gaps, and process pain points; translate findings into tuning, policy, and automation recommendations.
• Lead Palo Alto URL Filtering profile management activities, including policy edits, URL category/profile changes, whitelisting/blacklisting governance, access troubleshooting, exception handling, and operational impact assessment.
• Manage the change lifecycle for URL Filtering and related proxy governance requests, including intake review, risk assessment, approval coordination, implementation validation, rollback planning, evidence capture, and closure documentation.
• Support approved change windows, including weekends and non-business days, as most Palo Alto URL Filtering profile changes are implemented outside normal business hours.
• Participate in weekend on-call support when required to ensure priority URL Filtering profile changes, troubleshooting, validations, and rollback activities are supported during planned maintenance windows.
• Represent Cyber Defense Operations in Change Advisory Board (CAB) meetings to review upcoming URL Filtering changes, provide operational impact input, support approvals, and ensure business requirements are understood.
• Develop and maintain SOPs, runbooks, quality checklists, knowledge articles, and operational playbooks for DLP monitoring and URL Filtering profile management.
• Coach Analysts, review investigation quality, support onboarding, and help maintain consistent operational standards across the team.

Skills

Cybersecurity operations

DLP operations

Palo Alto URL Filtering

Microsoft DLP

Security change management

Microsoft 365 security tools

SIEM and ticketing systems

Data protection and governance

Education

Bachelor’s degree in Computer Science, Information Security, or related

Security+ / CISSP or equivalent certifications

Equivalent practical experience considered

Tools

Panorama

NGFW

Prisma Access/SASE

Job description

Invesco Ltd. in Charlottetown, PEI, is seeking an experienced Cyber Defense Operations Professional to lead Microsoft DLP monitoring, triage alerts, and manage URL Filtering profiles.

You will coordinate with Insider Risk, Incident Response, and Legal/Compliance to address high‑risk events. The role requires 5+ years in cybersecurity operations, hands‑on Palo Alto URL Filtering and Microsoft DLP experience, and strong change management skills.