DLP Analyst

Jobtailor; Toronto; On-site; CAD 90,000 - 130,000; Full time

Job summary

Jobtailor is seeking an Information Security professional focusing on Data Loss Prevention (DLP) to protect sensitive data across endpoints, email, cloud, and collaboration platforms.

You will implement and optimize DLP policies, tune detection rules, and collaborate with SOC, Legal, Privacy, and Business teams during investigations and risk mitigation.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field.
• 3+ years in information security focusing on information protection and data security.
• Experience with ISO 27001/2, PCI DSS, CIS, and NIST 800 series.
• Knowledge of data classification methodologies and data handling policies.
• Strong written and verbal communication and stakeholder collaboration.

Responsibilities

• Contribute to and support information protection strategy aligned with objectives and regulations.
• Implement, manage, and support DLP technologies to monitor and prevent data loss.
• Collaborate with Information Security to tune detection rules and monitoring.
• Participate in security incident response for internal events.
• Monitor and investigate DLP alerts across endpoints, email, cloud apps, and data stores.
• Analyze potential DLP incidents to determine risk, impact, and severity.
• Triage, investigate, contain, and escalate DLP events.
• Coordinate with SOC, Incident Response, Legal, Privacy, and Business teams.
• Document findings, actions taken, and lessons learned from incidents.
• Develop and tune detection rules to reduce false positives while preserving protection.
• Review data classification rules and policy exceptions; ensure standards alignment.
• Perform other information protection duties as assigned.

Skills

Data Loss Prevention (DLP)

Information Security

Cybersecurity Frameworks

Data Protection Regulations

Insider Threat Frameworks

Education

Bachelor's Degree in Information Security

ISO 27001/2

PCI DSS

CIS

NIST 800 Series

Tools

UEBA

DLP Technologies

Job description

• Contribute to and support the development of a holistic information protection strategy aligned with business objectives and regulatory requirements
• Implement, manage, and support DLP technologies and solutions to monitor, detect, and prevent loss of sensitive data
• Partner with Information Security teams to fine-tune detection rules and enhance security monitoring
• Participate as required in security incident response efforts for internal security events
• Monitor and investigate DLP alerts across endpoints, email, cloud applications, collaboration platforms, and data repositories
• Analyze potential data loss incidents and determine risk, impact, and severity
• Perform triage, investigation, containment, and escalation of DLP events
• Coordinate with the Security Operations Center (SOC), Incident Response, Legal, Privacy, and Business teams during investigations
• Document findings, actions taken, and lessons learned from security incidents
• Implement, maintain, and optimize DLP policies across enterprise security platforms
• Develop and tune detection rules to reduce false positives while maintaining effective data protection
• Review and update data classification rules, sensitive information types, and policy exceptions
• Ensure DLP controls align with organizational security standards and compliance requirements
• Perform other information protection related duties as assigned

Requirements

• Bachelor's degree in Information Security, Computer Science, or a related field
• 3+ years of experience in information security, with a focus on information protection and data security
• Working experience with cybersecurity frameworks and industry standards: ISO 27001/2, PCI DSS, CIS, NIST 800 Series
• In-depth knowledge of data protection regulations and standards, with experience implementing controls to achieve compliance
• Strong expertise in insider threat frameworks (CERT, NITTF) and security best practices
• Hands-on experience with information protection technologies, such as UEBA / DLP
• Strong understanding of data classification methodologies and experience developing data handling policies and procedures
• Excellent written, verbal, technical, and non-technical communication skills, with the ability to collaborate effectively and influence stakeholders at all levels of the organization

Core Competencies

Demonstrates expertise in implementing and managing Data Loss Prevention (DLP) technologies and solutions, ensuring compliance with data protection regulations and industry standards. Proficient in analyzing data loss incidents and collaborating with cross-functional teams to enhance information security strategies.

Highest-signal resume keywords

• Data Loss Prevention (DLP)
• Information Security
• Cybersecurity Frameworks
• Data Protection Regulations
• Incident Response

Hard Skills

• Information Protection
• Data Classification Methodologies
• Detection Rule Development
• Risk Analysis
• Data Handling Policies

Soft Skills

• Excellent Communication Skills
• Collaboration
• Stakeholder Influence

Certifications & Qualifications

• Bachelor's Degree in Information Security
• ISO 27001/2
• PCI DSS
• CIS
• NIST 800 Series

Industry Keywords

• Insider Threat Frameworks
• Security Best Practices
• Compliance Requirements

Tools & Technologies

• UEBA
• DLP Technologies