Manager - Data Loss Prevention

SBI Card; Haryana; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

SBI Card is seeking a skilled Data Loss Prevention professional to manage the DLP program, investigate leakage incidents, and coordinate with compliance, HR, and business functions to protect critical assets. You will deploy and tune DLP solutions, ensure incident response, and work with vendors to update tools, policies, and data protection measures across endpoints, networks, and data at rest.

This role is based in India and requires readiness to work in a 24x7 environment if needed.

Qualifications

• Bachelor’s Degree or advanced course in Computer Science or Information Security related areas.

Responsibilities

• Manage existing Data Leakage/Loss Prevention Program, refresh update/design change, policy configuring & data leakage investigations.
• Work with DLP Program/ Product vendors to update/he DLP tools, technology, and processes. Including identification, assessment of tools, technology, partners/ vendors.
• Understand and follow the incident response process through event escalations, ensure DLP alerts are investigated, responded, and actioned on time.
• Collaborate with internal control and support teams such as Compliance, HR, business functions.
• Participating as an individual contributor on a team in the deployment of a Data Classification, Data Discovery, Data Marking, and DLP solution.
• Assist with the development and testing of proposed DLP solutions. Interface with system owners to coordinate new endpoint deployments.
• G-Work with cross-functional teams to integrate DLP systems with other solutions like SIEM, NAC and Vulnerability Management.
• H-Perform operations and maintenance tasks such as patching and upgrades on all DLP system components. Respond to troubleshooting tickets associated with DLP and Data masking, Information Rights management solution.
• Manage e-discovery program for Data-at-rest, PII Discovery Scan for PCI-DSS and Data Privacy requirement and Information Rights Management.

Education

Bachelor’s Degree or advanced course in Computer Science or Information Security related areas

Job description

Role Purpose

The financial, reputational and regulatory impact of having SBIC’s critical assets stolen or damaged can be catastrophic. Anyone with trusted access can exploit the vulnerabilities that protect critical assets, causing millions of dollars of damage. This role is specific to manage all identified/known threat vector of information leakage either deliberately or inadvertently.

Role Accountability

• Manage existing Data Leakage/Loss Prevention Program, refresh update/design change, policy configuring & data leakage investigations.
• Work with DLP Program/ Product vendors to update/he DLP tools, technology, and processes. Including identification, assessment of tools, technology, partners/ vendors.
• Understand and follow the incident response process through event escalations, ensure DLP alerts are investigated, responded, and actioned on time.
• Collaborate with internal control and support teams such as Compliance, HR, business functions.
• Participating as an individual contributor on a team in the deployment of a Data Classification, Data Discovery, Data Marking, and DLP solution.
• Assist with the development and testing of proposed DLP solutions. Interface with system owners to coordinate new endpoint deployments.
• G-Work with cross-functional teams to integrate DLP systems with other solutions like SIEM, NAC and Vulnerability Management.
• H-Perform operations and maintenance tasks such as patching and upgrades on all DLP system components. Respond to troubleshooting tickets associated with DLP and Data masking, Information Rights management solution.
• Manage e-discovery program for Data-at-rest, PII Discovery Scan for PCI-DSS and Data Privacy requirement and Information Rights Management.

Measures of Success

• Uptime of DLP Platform, implementation, upgrade and life-cycle management
• Development and maturity of DLP Policies & False Positives under acceptable threshold
• Delivery of project plans, milestone updates, presentations, assessment reports and communications to senior management and other relevant stakeholders.
• KPI/KRI is as per defined threshold

Technical Skills / Experience / Certifications

• Clear understanding & Hands-on experience on Data Leakage Prevention Platform including Infra & Content Management & Leakage Threat Vector
• Good understanding of DLP solutions, preferably from Symantec / Broadcom, Data Classification, IRM etc.
• Experienced with deployment, maintenance, and operations of one or more DLP solutions on endpoint, web, and email.
• Good analytical, troubleshooting, and problem-solving skills
• Ability to present information to management & stakeholders (Internal & external)
• Good verbal and written communication skills
• Ability & willingness to work in 24*7 operations/support as required by organization.
• Bachelor’s Degree or advanced course in Computer Science or Information Security related areas
• DLP Product OEM Certification on related technology
• Prior experience in DLP solution management & understanding of Data-in-use, Data-in-motion & Data-at-rest.

Competencies critical to the role

• Demonstrate skills to achieve stated objectives.
• Demonstrate communication skills to address different audiences.
• Demonstrate self-starter with ability to gain required knowledge in dynamic environments and remain up to date on cutting-edge technologies.
• Demonstrate teamwork & collaboration.
• Demonstrate analytical, troubleshooting, and problem-solving skills.\

Qualification

Bachelor’s Degree or advanced course in Computer Science or Information Security related areas

Preferred Industry

BFSI / NBFC /E-commerce/IT & ITES / Telecom