DLP Policy & Controls Specialist

Axelon Services Corporation; Montreal; Hybrid; CAD 110,000 - 140,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Axelon Services Corporation in Montreal is seeking an experienced DLP architect to design, implement, and optimize DLP policies across email, endpoints, web, cloud, and GenAI environments. You will own policy lifecycles, testing, tuning, and documentation while aligning with risk, regulatory, and control requirements.

The role requires 5+ years in DLP or cybersecurity, strong policy tuning skills, and excellent stakeholder communication to support risk, compliance, and audit inquiries.

Qualifications

• 5+ years of experience in DLP, cybersecurity, data protection, information security, or technology risk.
• Strong hands-on experience with DLP policy creation and lifecycle management.
• Strong understanding of DLP detection and enforcement controls.
• Experience with DLP policy tuning, including reducing false positives and false negatives.
• Experience translating security and control requirements into deployable DLP policies.
• Strong understanding of sensitive data classification and detection methods.
• Experience supporting risk and audit inquiries, including control coverage, gaps, limitations, and compensating controls.
• Experience addressing jurisdiction-specific regulatory and data residency requirements.

Responsibilities

• Design, develop, and maintain DLP policies across email, endpoint, web, cloud/SaaS, and GenAI environments.
• Manage the DLP policy lifecycle, including policy creation, testing, tuning, implementation support, documentation, and optimization.
• Translate security, risk, regulatory, and control requirements into deployable DLP policies and controls.
• Tune DLP policies to improve detection accuracy and reduce false positives and false negatives.
• Apply sensitive data classification and detection methods to strengthen DLP control effectiveness.
• Incorporate jurisdiction-specific requirements, including data residency and regulatory constraints such as China Onshore requirements.
• Partner with engineering and operations teams to ensure DLP controls are technically feasible and operationally supportable.
• Assess and document DLP control coverage, gaps, limitations, exceptions, and compensating controls.
• Support risk, compliance, and audit inquiries related to DLP control design and effectiveness.
• Analyze technical, operational, and regulatory information and communicate findings clearly to technology and business stakeholders.
• Support DLP metrics, reporting, and control-effectiveness monitoring.

Skills

DLP policy design

Cybersecurity

Data protection

Regulatory compliance

Stakeholder comms

Documentation

Education

Bachelor's in CS or related field

Tools

GenAI DLP tooling

DSPM tooling

Data classification tooling

Job description

• Work Mode: Hybrid (Day 1 onboarding onsite/in office presence 3x/week)

Summary

• Location: Montreal
• Work Mode: Hybrid (Day 1 onboarding onsite/in office presence 3x/week)

Responsibilities

• Design, develop, and maintain DLP policies across email, endpoint, web, cloud/SaaS, and GenAI environments.
• Manage the DLP policy lifecycle, including policy creation, testing, tuning, implementation support, documentation, and optimization.
• Translate security, risk, regulatory, and control requirements into deployable DLP policies and controls.
• Tune DLP policies to improve detection accuracy and reduce false positives and false negatives.
• Apply sensitive data classification and detection methods to strengthen DLP control effectiveness.
• Incorporate jurisdiction-specific requirements, including data residency and regulatory constraints such as China Onshore requirements.
• Partner with engineering and operations teams to ensure DLP controls are technically feasible and operationally supportable.
• Assess and document DLP control coverage, gaps, limitations, exceptions, and compensating controls.
• Support risk, compliance, and audit inquiries related to DLP control design and effectiveness.
• Analyze technical, operational, and regulatory information and communicate findings clearly to technology and business stakeholders.
• Support DLP metrics, reporting, and control-effectiveness monitoring.

Requirements

• Minimum 5 years of relevant experience in DLP, cybersecurity, data protection, information security, or technology risk.
• Strong hands-on experience with DLP policy creation and lifecycle management.
• Strong understanding of DLP detection and enforcement controls.
• Experience with DLP policy tuning, including reducing false positives and false negatives.
• Experience translating security and control requirements into deployable DLP policies.
• Strong understanding of sensitive data classification and detection methods.
• Experience supporting risk and audit inquiries, including control coverage, gaps, limitations, and compensating controls.
• Experience addressing jurisdiction-specific regulatory and data residency requirements.
• Strong documentation, analytical, and stakeholder communication skills.
• Ability to collaborate effectively with engineering and operations teams to develop practical and supportable controls.

Preferred Skills

• Experience with GenAI DLP / AI data protection.
• Knowledge of DSPM, data classification, and sensitivity labeling.
• Familiarity with GDPR, CCPA/CPRA, PCI DSS, and financial-services regulatory requirements.
• Experience with DLP incident and alert analysis.
• Experience developing DLP metrics, reporting, and control-effectiveness dashboards.
• General understanding of cloud security, SaaS security, and cloud data protection.

This role is for an existing vacancy.