Manager - Data Loss Prevention

SBI Card; Gurugram District; On-site; INR 1,800,000 - 4,000,000; Full time

Job summary

SBI Card is seeking a security-focused professional to manage Data Leakage Prevention programs and incidents. The role emphasizes hands-on DLP platform operations, data governance, and cross-functional collaboration across security, compliance, HR, and business teams.

You will lead deployment and maintenance of data classification, discovery, marking, and leakage controls across endpoints, web, and email, interfacing with SIEM and IRM ecosystems.

Qualifications

• Clear understanding & hands-on experience on Data Leakage Prevention Platform including Infra & Content Management & Leakage Threat Vector.
• Good understanding of DLP solutions, preferably from Symantec / Broadcom, Data Classification, IRM etc.
• Experienced with deployment, maintenance, and operations of one or more DLP solutions on endpoint, web, and email.
• Good analytical, troubleshooting, and problem-solving skills.

Responsibilities

• Manage existing Data Leakage/Loss Prevention Program, refresh update/design change, policy configuring & data leakage investigations.
• Work with DLP Program/ Product vendors to update/he DLP tools, technology, and processes. Including identification, assessment of tools, technology, partners/ vendors.
• Understand and follow the incident response process through event escalations, ensure DLP alerts are investigated, responded, and actioned on time.
• Collaborate with internal control and support teams such as Compliance, HR, business functions.
• Participating as an individual contributor on a team in the deployment of a Data Classification, Data Discovery, Data Marking, and DLP solution.
• Assist with the development and testing of proposed DLP solutions. Interface with system owners to coordinate new endpoint deployments.
• G-Work with cross-functional teams to integrate DLP systems with other solutions like SIEM, NAC and Vulnerability Management.
• H-Perform operations and maintenance tasks such as patching and upgrades on all DLP system components. Respond to troubleshooting tickets associated with DLP and Data masking, Information Rights management solution.
• Manage e-discovery program for Data-at-rest, PII Discovery Scan for PCI-DSS and Data Privacy requirement and Information Rights Management.

Skills

DLP Platform

Incident response

Data classification

Endpoint deployment

SIEM integration

Education

Bachelor’s Degree in Computer Science

Tools

Symantec DLP

Broadcom DLP

Job description

Role Purpose:

The financial, reputational and regulatory impact of having SBIC’s critical assets stolen or damaged can be catastrophic. Anyone with trusted access can exploit the vulnerabilities that protect critical assets, causing millions of dollars of damage. This role is specific to manage all identified/known threat vector of information leakage either deliberately or inadvertently.

This is a technical & solution-oriented expertise role in Data Leakage Prevention control to bring-in product and solution level skills on DLP platform, run & maintain overall platform, assuring deployment across egress points and investigate Data-Leakage-Incidents as & when required.

Role Accountability

• Manage existing Data Leakage/Loss Prevention Program, refresh update/design change, policy configuring & data leakage investigations.


• Work with DLP Program/ Product vendors to update/he DLP tools, technology, and processes. Including identification, assessment of tools, technology, partners/ vendors.


• Understand and follow the incident response process through event escalations, ensure DLP alerts are investigated, responded, and actioned on time.


• Collaborate with internal control and support teams such as Compliance, HR, business functions.


• Participating as an individual contributor on a team in the deployment of a Data Classification, Data Discovery, Data Marking, and DLP solution.


• Assist with the development and testing of proposed DLP solutions. Interface with system owners to coordinate new endpoint deployments.


• G-Work with cross-functional teams to integrate DLP systems with other solutions like SIEM, NAC and Vulnerability Management.


• H-Perform operations and maintenance tasks such as patching and upgrades on all DLP system components. Respond to troubleshooting tickets associated with DLP and Data masking, Information Rights management solution.


• Manage e-discovery program for Data-at-rest, PII Discovery Scan for PCI-DSS and Data Privacy requirement and Information Rights Management.

Measures of Success

• Uptime of DLP Platform, implementation, upgrade and life-cycle management


• Development and maturity of DLP Policies & False Positives under acceptable threshold


• Delivery of project plans, milestone updates, presentations, assessment reports and communications to senior management and other relevant stakeholders.


• KPI/KRI is as per defined threshold

Technical Skills / Experience / Certifications

• Clear understanding & Hands-on experience on Data Leakage Prevention Platform including Infra & Content Management & Leakage Threat Vector


• Good understanding of DLP solutions, preferably from Symantec / Broadcom, Data Classification, IRM etc.


• Experienced with deployment, maintenance, and operations of one or more DLP solutions on endpoint, web, and email.


• Good analytical, troubleshooting, and problem-solving skills


• Ability to present information to management & stakeholders (Internal & external)


• Good verbal and written communication skills


• Ability & willingness to work in 24*7 operations/support as required by organization.


• Bachelor’s Degree or advanced course in Computer Science or Information Security related areas


• DLP Product OEM Certification on related technology


• Prior experience in DLP solution management & understanding of Data-in-use, Data-in-motion & Data-at-rest.

Competencies critical to the role

• Demonstrate skills to achieve stated objectives.


• Demonstrate communication skills to address different audiences.


• Demonstrate self-starter with ability to gain required knowledge in dynamic environments and remain up to date on cutting-edge technologies.


• Demonstrate teamwork & collaboration.


• Demonstrate analytical, troubleshooting, and problem-solving skills.\\

Qualification

Bachelor’s Degree or advanced course in Computer Science or Information Security related areas

Preferred Industry

BFSI / NBFC /E-commerce/IT & ITES / Telecom