Cybersecurity DLP BYOD Team Lead

Hammerjack Pty Ltd; Philippines; On-site; PHP 1,800,000 - 2,400,000; Full time

Job summary

Hammerjack Pty Ltd is seeking an experienced Cybersecurity (DLP) Team Lead to own design of information protection, DLP, and BYOD policies across Microsoft 365. You will drive the taxonomy for sensitivity labels, prepare auto-labelling rules, and oversee the DLP policy model with a graduated enforcement approach.

Lead a small engineering pod and deliver runbooks for client operation. The role requires deep expertise in Purview Information Protection and cross-Product DLP, with strong

Qualifications

• 8+ years designing and implementing Purview IP & DLP.
• Deep experience with sensitivity labels and taxonomy design.
• Unified DLP across Exchange Online, SharePoint Online, OneDrive and Teams.
• EDM, OCR-based detection and trainable classifiers.
• Auto-labelling design, simulation mode and precision tuning.
• MIP client packaging, compatibility validation and phased deployment.
• Knowledge of Entra Conditional Access and Intune App Protection policies.
• Microsoft 365 licensing literacy (E3/IP&G vs E5).
• Strong documentation skills: HLD/LLD and test cases.

Responsibilities

• Own high-level and low-level design for information protection, DLP and BYOD.
• Design sensitivity label taxonomy, including policies for protection, labeling, publishing and assignment.
• Design DLP policy model and graduated enforcement: audit, warn, block.
• Create auto-labelling rules; run simulations; tune precision before production.
• Review and refine pilot configuration before scaling organisation-wide.
• Regression-test new labels and policies against existing labels and live processes.
• Provide design authority and QA over the engineering team.
• Deliver knowledge transfer and runbooks for client operation.

Skills

Purview DLP design

Sensitivity labels

DLP across O365

Auto-labelling design

MIP packaging

Entra Conditional Access

Intune App Protection

Licensing literacy

Documentation

Job description

Cybersecurity (DLP) Team Lead

Key Responsibilities

• Own the high-level and low-level design for information protection, DLP and BYOD.
• Design the sensitivity label taxonomy, including protection, marking, publishing and assignment policies.
• Design the DLP policy model and the graduated enforcement approach — audit, then warn, then block.
• Design auto-labelling rules, run them in simulation mode, and tune precision before production enablement.
• Review and refine the existing pilot configuration before scaling it organisation-wide.
• Regression-test new labels and policies against existing labels, DLP rules and live business processes.
• Provide design authority and technical quality assurance over the engineering team.
• Deliver technical knowledge transfer and author runbooks so the client can operate the estate independently.

Must-Have Skills

• 8+ years hands-on designing and implementing Microsoft Purview Information Protection and DLP.
• Deep experience with sensitivity labels — taxonomy design, protection settings, label policies and publishing.
• Unified DLP across Exchange Online, SharePoint Online, OneDrive and Microsoft Teams.
• Sensitive Information Types, Exact Data Match (EDM), trainable classifiers and OCR-based detection.
• Auto-labelling design, simulation-mode execution and precision / recall tuning.
• Microsoft Information Protection (MIP) client packaging, compatibility validation and phased deployment.
• Working design-level knowledge of Microsoft Entra Conditional Access and Intune App Protection policies.
• Microsoft 365 licensing literacy — able to distinguish E3 plus IP&G capability from E5-tier features.
• Strong documentation skills: HLD, LLD, test cases and knowledge-transfer material.

Good-to-Have Skills

• Delivery experience with an International Financial Institution or regulated bank (highly preferred by the client).
• Microsoft Sentinel or Defender XDR integration experience.
• Exposure to Copilot readiness, oversharing assessment or data-security posture management.
• Experience leading a small engineering pod of 3–5 people.

Certifications

Mandatory

• Microsoft SC-400 — Information Protection and Compliance Administrator Associate

Preferred

• Microsoft SC-300 — Identity and Access Administrator Associate
• Microsoft SC-100 — Cybersecurity Architect Expert