L2 Operations Lead – DLP

TESTQ Technologies LTD.; United Kingdom; Hybrid; GBP 65,000 - 95,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

TESTQ Technologies LTD. is seeking an L2 Operations Lead for Data Loss Prevention (DLP) with a strong background in incident management and cross-functional collaboration.

The role supports Microsoft Purview, Defender and related DLP services, working in a hybrid setup (2 days in the office). Ideal candidates will have 10+ years of L2 DLP experience, proven incident response skills, and experience coordinating with C-suite stakeholders.

Qualifications

• 10+ years of L2 Data Loss Prevention experience.
• DLP event handling and escalation.
• Clear written and spoken English.

Responsibilities

• Manage end-to-end DLP incidents and events 24x7.
• Respond to DLP events and escalate as needed.
• Keep ServiceNow/Purview tickets up to date with resolutions.
• Assist Major Incident Manager and RCA reviews; update SOPs and knowledge-base articles.
• Collaborate with Malware, Network Security and IDAM on cross-tower issues.

Skills

DLP

Incident management

ITSM

English proficiency

Tools

Purview

Defender

Symantec

ServiceNow

PowerShell/Python

Job description

TQINE0090_6047 - L2 Operations Lead – DLP

Job Type: Contract,Permanent

Work Mode: Hybrid (2 Days from office)

L2 Operations

Domain

Scope

Microsoft Purview, Microsoft Defender and Symantec Email encryption Service.

Support the client's DLP services. Respond to DLP events & incidents 24x7 and elevate when needed.

Process

• End-to-end incident management including Troubleshoot DLP related issues.

get it resolved or escalated to L3 or further to resolve & close.

• Respond to, analyse and escalated DLP events per SOP, 24x7.

• Support Microsoft Purview and Microsoft Defender (not the administration).

• Report security issues promptly with recommended actions.

• Follow client security standards and guidelines.

• Keep ServiceNow/Purview tickets current, with clear resolution and closure notes.

• Assist Major Incident Manager & join RCA reviews. Update SOPs and knowledge-base articles related to DLP domain.

• Work with Malware Tools, Network Security and IDAM on cross-tower issues.

Tools

Technologies

• DLP policies and event analysis

• Information classification and labelling

• E-mail, web and endpoint data controls

• Python or PowerShell scripting

Experience

• 10+ Years of L2 Data Loss Prevention experience

• DLP event handling and escalation

• ITSM incident, problem and change processes

• Clear written and spoken English

• Working with C-suite personnel

Preferred Certifications