Data Loss Prevention Team Lead

Hiscox; Lisboa; Hybrid; EUR 70,000 - 110,000; Full time

Job summary

Hiscox in Lisbon is seeking a Data Loss Prevention Team Lead to establish and lead a new DLP function across web, email, cloud, and endpoint environments. You will shape policy frameworks, drive platform integrations (Zscaler DLP, Microsoft Purview, Mimecast), and supervise a small DLP analyst team.

The role requires SME-level DLP knowledge, strong incident management, and experience coordinating with Privacy, Legal, and Security groups to ensure GDPR compliance and effective data protection

Qualifications

• Extensive enterprise DLP experience across multiple platforms.
• Strong leadership and team-building abilities.
• Experience designing and implementing DLP policies.
• Proven incident management and escalation track record.
• Knowledge of GDPR and data classification frameworks.

Responsibilities

• Oversee DLP alert operations across web, endpoint, cloud, and email.
• Define and mature DLP strategy, operating model, and policies.
• Lead a small team of DLP Analysts and mentor staff.
• Collaborate with Privacy, Legal, and Security teams on regulatory alignment.
• Report DLP metrics and drive continuous improvement.

Skills

DLP expertise

Leadership

Policy design

Incident management

Cloud security

Tools

Zscaler DLP

Microsoft Purview

Mimecast

Job description

## Data Loss Prevention Team LeadApply: Hybrid: Lisbon: York: Full time: Posted Today: R0020435**Job Type:**Permanent**Build a brilliant future with Hiscox**## Role OverviewThe Data Loss Prevention (DLP) Team Lead will establish and lead a newly created DLP function, taking ownership of the organisation's approach to data protection across network, endpoint, cloud, and email environments.This function is being created by a DLP project which is enhancing technologies and processes.As the first dedicated hire in this space, the role will contribute to the DLP strategy, shape policy frameworks, and optimise the use of existing technologies including Zscaler DLP, Microsoft Purview, and Mimecast.The role will act as the primary Subject Matter Expert (SME), oversee DLP alert operations, and build a small team of DLP Analysts to support day-to-day activities. ## Key ResponsibilitiesDLP Strategy & Capability Development* Establish and mature the organisation's DLP capability across web, email, AI, and cloud platforms* Define the operating model, processes, and standards for DLP acros**s** Zscaler, Microsoft Purview, and Mimecast* Assess current configurations and recommend enhancements to improve data protection coverage and effectiveness* Develop a forward-looking roadmap for DLP capabilities, including integration across platforms and alignment with broader security strategy* Identify gaps between tooling capabilities and business requirements, and propose solutionsPolicy & Control Design* Design, implement, and continuously refine DLP policies across: Zscaler DLP (web and cloud traffic controls) Microsoft Purview (M365, endpoint, and data classification) Mimecast (email security and data protection policies)* Collaborate closely with Privacy, Legal, and Security teams to ensure policies align with GDPR and other regulatory requirements* Translate data classification standards into enforceable DLP detection rules across all platforms* Optimise policies to balance risk reduction with user experience (reducing false positives and alert fatigue)* Manage sanctioning of apps as appropriate in collaboration with Procurement* Leverage DSPM tooling to ensure that data used for AI grounding in services is correctly securedOperational Leadership & Incident Management* Oversee the monitoring and triage of DLP alerts across all platforms (web, endpoint, email, and cloud)* Act as the primary escalation point for complex, high-risk, or sensitive data loss incidents* Define and implement standard operating procedures (SOPs) for alert handling across Zscaler, Purview, and Mimecast* Ensure consistent incident response, investigation, and documentation practices* Work with Security Operations and Privacy teams on incident escalation and breach assessment processesSubject Matter Expertise (SME)* Serve as the technical and functional SME for: Zscaler DLP policies and traffic controls Microsoft Purview DLP, Information Protection, and Insider Risk capabilities Mimecast data protection and email DLP controls* Stay current on new features, platform updates, and emerging DLP trends* Lead configuration reviews, tuning exercises, and platform optimisation initiatives* Provide guidance and training to internal teams on DLP capabilities and data protection best practicesTeam Leadership & Development* Recruit, onboard, and lead a team of DLP Analysts* Transition day-to-day alert triage and investigation to the analyst team over time* Define workflows, responsibilities, and performance expectations* Provide coaching, mentoring, and ongoing development for team members* Embed a culture of continuous improvement and operational excellenceStakeholder Engagement & Reporting* Partner with Privacy, Legal, IT, and Security Operations teams on DLP-related initiatives* Provide regular reporting on DLP metrics, including: Alert volumes and trends Incident severity and response times Policy effectiveness and false positive rates* Communicate risks, insights, and recommendations to senior stakeholders* Support audits, compliance reviews, and regulatory inquiries related to data protection ## Key Skills & Experience* Strong hands-on experience with enterprise DLP technologies, specifically: Zscaler DLP Microsoft Purview (DLP, Information Protection, Insider Risk) Mimecast (email DLP / content inspection)* Proven track record of designing and implementing DLP policies across multiple control points (endpoint, network, cloud, and email)* Strong understanding of data protection regulations (e.g., GDPR) and data classification frameworks* Experience handling and managing security incidents and escalations* Ability to tune DLP systems to improve signal-to-noise ratio and operational efficiency* Experience leading or building teams (or readiness to step into a leadership role)* Strong communication and stakeholder management skills