Cybersecurity DLP BYOD Team Lead

Confidential; Mandaluyong; On-site; PHP 1,800,000 - 3,000,000; Full time

Job summary

Confidential in Metro Manila is seeking a senior specialist to own the high-level and low-level design for information protection, DLP and BYOD, deploying Purview across the client estate. You will design the sensitivity label taxonomy, auto-labelling rules, and lead a small engineering pod to validate, simulate, and productionize policies while ensuring audit readiness and knowledge transfer.

Working knowledge of Entra Conditional Access, Intune App Protection, and licensing considerations will

Qualifications

• 8+ years hands-on designing and implementing Microsoft Purview Information Protection and DLP.
• Deep experience with sensitivity labels: taxonomy design, protection settings, label policies and publishing.
• Unified DLP across Exchange Online, SharePoint Online, OneDrive and Microsoft Teams.
• Sensitive Information Types, EDM, trainable classifiers and OCR-based detection.
• Auto-labelling design, simulation-mode execution and precision/recall tuning.
• MIP client packaging, compatibility validation and phased deployment.
• Knowledge of Entra Conditional Access and Intune App Protection policies.
• 365 licensing literacy: distinguish E3+IP&G from E5 features.
• Documentation: HLD/LLD, test cases and knowledge-transfer materials.
• Mandatory: SC-400 certification; Preferred: SC-300, SC-100.

Responsibilities

• Own the high-level and low-level design for information protection, DLP and BYOD.
• Design the sensitivity label taxonomy, including protection, marking, publishing and assignment policies.
• Design the DLP policy model and the graduated enforcement approach — audit, then warn, then block.
• Design auto-labelling rules, run them in simulation mode, and tune precision before production enablement.
• Review and refine the existing pilot configuration before scaling it organisation-wide.
• Regression-test new labels and policies against existing labels, DLP rules and live business processes.
• Provide design authority and QA over the engineering team.
• Deliver knowledge transfer and runbooks so the client can operate independently.

Skills

Purview DLP design

Sensitivity labels taxonomy

DLP across M365 apps

EDM & classifiers

Auto-labelling design

MIP packaging & deployment

Entra Conditional Access

365 licensing literacy

HLD/LLD documentation

Tools

Microsoft Purview

SharePoint Online

Exchange Online

OneDrive

Microsoft Teams

Intune

Entra

Job description

• Own the high-level and low-level design for information protection, DLP and BYOD.
• Design the sensitivity label taxonomy, including protection, marking, publishing and assignment policies.
• Design the DLP policy model and the graduated enforcement approach — audit, then warn, then block.
• Design auto-labelling rules, run them in simulation mode, and tune precision before production enablement.
• Review and refine the existing pilot configuration before scaling it organisation-wide.
• Regression-test new labels and policies against existing labels, DLP rules and live business processes.
• Provide design authority and technical quality assurance over the engineering team.
• Deliver technical knowledge transfer and author runbooks so the client can operate the estate independently.

Must-Have Skills

• 8+ years hands-on designing and implementing Microsoft Purview Information Protection and DLP.
• Deep experience with sensitivity labels — taxonomy design, protection settings, label policies and publishing.
• Unified DLP across Exchange Online, SharePoint Online, OneDrive and Microsoft Teams.
• Sensitive Information Types, Exact Data Match (EDM), trainable classifiers and OCR-based detection.
• Auto-labelling design, simulation-mode execution and precision / recall tuning.
• Microsoft Information Protection (MIP) client packaging, compatibility validation and phased deployment.
• Working design-level knowledge of Microsoft Entra Conditional Access and Intune App Protection policies.
• Microsoft 365 licensing literacy — able to distinguish E3 plus IP&G capability from E5-tier features.
• Strong documentation skills: HLD, LLD, test cases and knowledge-transfer material.

Good-to-Have Skills

• Delivery experience with an International Financial Institution or regulated bank (highly preferred by the client).
• Microsoft Sentinel or Defender XDR integration experience.
• Exposure to Copilot readiness, oversharing assessment or data-security posture management.
• Experience leading a small engineering pod of 3–5 people.

Certifications

Mandatory

• Microsoft SC-400 — Information Protection and Compliance Administrator Associate

Preferred

• Microsoft SC-300 — Identity and Access Administrator Associate
• Microsoft SC-100 — Cybersecurity Architect Expert