Senior Lead – Data Loss Prevention (DLP)

Mizuho; Pune District; Sur place; INR 3 500 000 - 6 000 000; Plein temps

Résumé du poste

Mizuho Pune seeks an experienced Senior Lead - Data Loss Prevention (DLP) to own and drive the enterprise DLP program across Microsoft Purview, Proofpoint, and Netskope. You will lead policy development, classification, and data protection across endpoints, email, cloud apps, and networks.

This role requires deep technical expertise, strong leadership, and stakeholder management to translate risk into business actions.

Qualifications

• 12+ years in information security with focus on Data Loss Prevention.
• Hands-on experience administering Microsoft Purview (DLP/Information Protection), Proofpoint, Netskope.

Responsabilités

• Own end-to-end DLP roadmap aligning with business risk and regulatory requirements.
• Define and mature DLP policies across email, endpoint, network, and cloud.
• Lead configuration, tuning, and optimization of DLP tools and integration with SIEM/SOAR.

Connaissances

Data Loss Prevention

Microsoft Purview

Proofpoint

Netskope

Data classification

Cloud security

Incident response

Regulatory frameworks

Stakeholder management

Communication

Formation

Bachelor's degree in Computer Science or Information Security

Outils

SIEM/SOAR (Splunk, Microsoft Sentinel)

PowerShell

Python

Description du poste

At Mizuho, we provide the stability of an international industry leader with the career trajectory of a growing business. Our steady, strategic growth gives our people at all levels rewarding degrees of responsibility and richer work experience than a boutique firm or an established giant could offer alone.

It's the local expertise of our employees that makes our global network so powerful. By collaborating with colleagues and clients who share the same ambition and drive, you can amplify your sphere of influence and base of knowledge as part of one of the largest banks in the world.

We are seeking an experienced Senior Lead - Data Loss Prevention (DLP) to own and drive the strategy, design, implementation, and day-to-day operations of our enterprise data protection program. This role will lead the DLP function across Microsoft Purview, Proofpoint, and Netskope, ensuring sensitive data - including PII, PCI, PHI, and intellectual property - is discovered, classified, and protected across endpoints, email, cloud applications, and network channels. The ideal candidate combines deep technical expertise with strong leadership, policy-development, and stakeholder-management skills.

Key Responsibilities:

• Own the end-to-end DLP roadmap, aligning data protection controls with business risk, regulatory requirements, and compliance frameworks (e.g., GDPR, HIPAA, PCI-DSS, SOX).
• Define and continuously mature DLP policies, standards, and playbooks across email, endpoint, network, and cloud (CASB) channels.
• Act as the subject-matter expert (SME) for DLP, advising leadership on emerging risks, tool capabilities, and gaps.
• Lead configuration, tuning, and optimization of Microsoft Purview (Information Protection, DLP policies, sensitivity labels, insider risk management).
• Manage Proofpoint for email DLP, data exfiltration prevention, and insider threat detection.
• Administer Netskope for cloud/web DLP, CASB policies, and SaaS data protection.
• Design and implement data classification schemas, content inspection rules, and policy tuning to minimize false positives/negatives.
• Integrate DLP tools with SIEM/SOAR, ticketing, and incident response workflows.

Operations & Incident Response

• Lead investigation and triage of DLP alerts and incidents; oversee escalation, root-cause analysis, and remediation.
• Develop and maintain incident response runbooks specific to data loss events.
• Partner with SOC, Legal, HR, and Compliance teams on investigations involving sensitive data exposure or insider threats.
• Provide regular reporting and metrics (KPIs/KRIs) on DLP program effectiveness to senior leadership.

Team & Stakeholder Leadership

• Mentor and provide technical guidance to junior DLP/security analysts.
• Partner with IT, Legal, Compliance, HR, and business unit leaders to align DLP controls with organizational workflows and minimize business disruption.
• Lead cross-functional projects such as new data classification rollouts, M&A data protection integration, and cloud migration security reviews.
• Delivery training and awareness sessions on data protection best practices.

Governance & Compliance

• Ensure DLP controls support audit and regulatory compliance requirements; support internal/external audits with evidence and documentation.
• Maintain policy documentation, standard operating procedures (SOPs), and control matrices.
• Track and report on the effectiveness of DLP controls against defined risk appetite.

Required Qualifications

• 12+ years of experience in information security, with at least 3+ years focused specifically on Data Loss Prevention.
• Hands-on, expert-level experience administering and tuning Microsoft Purview (DLP/Information Protection), Proofpoint, and Netskope.
• Strong understanding of data classification, encryption, sensitivity labeling, and content inspection techniques (regex, fingerprinting, EDM, ML-based classifiers).
• Solid knowledge of cloud security concepts (CASB, SaaS security) and email security architecture.
• Experience leading incident response for data exfiltration/insider threat scenarios.
• Familiarity with regulatory frameworks: GDPR, HIPAA, PCI-DSS, CCPA, SOX, or similar.
• Strong stakeholder management, communication, and presentation skills - able to translate technical risk into business language.
• Bachelor's degree in computer science, Information Security, or related field (or equivalent experience).

Preferred Qualifications:

• Relevant certifications: CISSP, CDPSE, CIPP/E, GDLP, or vendor-specific certifications (Microsoft SC-400, Proofpoint, Netskope NCCSA/NCCSE).
• Experience with SIEM/SOAR platforms (Splunk, Sentinel, etc.) and scripting (PowerShell/Python) for automation.
• Prior experience leading or mentoring a security team.
• Experience in a regulated industry (financial services, healthcare, or similar).

Company Overview:

Mizuho Pune is an integral part of Mizuho Financial Group, one of the world's leading financial institutions with a strong global presence across the Americas, EMEA, and Asia. Based in India, Mizuho Pune supports Mizuho's international businesses by delivering high-quality, scalable, and resilient services across multiple functions.

Mizuho Pune plays a critical role in driving operational excellence, standardization, and innovation for Mizuho Americas. By combining deep domain expertise with strong process, technology, and analytical capabilities, it partners closely with regional and global teams to support corporate and investment banking, capital markets, and corporate services functions, while adhering to the highest standards of risk management, regulatory compliance, and control.

Mizuho Pune offers competitive compensation and benefits package aligned with industry standards and local market practices.

Mizuho Pune is an equal opportunity employer and is committed to fostering an inclusive and diverse workplace.

Employment is subject to applicable background verification checks in accordance with Indian laws and company policies.