L2 Data Classification Engineer (Fortra Titus)

proven; Riyadh; On-site; SAR 200,000 - 300,000; Full time

Job summary

A leading technology firm in Riyadh is looking for an L2 Data Classification Engineer to manage the Fortra Titus data-classification platform. The role involves policy deployment, end-user support, and systems integration checks to ensure effective classification solutions. Candidates should have 2-4 years of experience in Data Protection and strong knowledge of Microsoft 365 environments. If you are skilled in tool validation and user support, this role offers a dynamic work opportunity with growth potential.

Qualifications

• 2–4 years in Data Protection / Endpoint / M365 support.
• 1+ year operating Fortra Titus/DCS (Office/Outlook add-ins).
• Strong Microsoft 365 user/admin literacy.

Responsibilities

• Operate and support the bank’s Fortra Titus data‑classification platform.
• Deploy and validate policies to Microsoft Office & Outlook.
• Monitor adoption %, DLP tag-match rate, and export audit evidence.

Skills

Data Protection

M365 support

Fortra Titus

Forcepoint DLP

Change Management

Tools

Fortra Data Classification Suite

Microsoft Office

Outlook

Job description

Job Title: L2 Data Classification Engineer (Fortra Titus) — Operations & Adoption
Location: Riyadh
Reports to: L3 Data Classification Engineer and Security Delivery Lead

Role Purpose

Operate and support the bank’s Fortra Titus data‑classification platform day‑to‑day: deploy and validate policies to Microsoft Office & Outlook, triage incidents, drive user adoption, and keep evidence‑ready reports for audits. You’ll ensure Titus labels are consistently applied and consumed by downstream controls like Forcepoint DLP and Seclore DRM, raising complex items to L3 as needed. Fortra’s DCS (formerly Titus) enforces classification at document/email creation and persists metadata for downstream tools, which is exactly what this L2 role keeps healthy at scale.

Scope & toolset (operate & validate)

• Primary: Fortra Data Classification Suite (Titus) for Microsoft Office (Word/Excel/PowerPoint) and Outlook add‑ins; user‑driven / suggested / automatic labeling; protective markings and metadata.
• Integrations to verify: Forcepoint DLP reading Titus tags, Seclore DRM applying rights based on classification, SIEM dashboards for events/telemetry.
• Environment context: Microsoft 365 collaboration with sensitivity labeling coexistence patterns (awareness of label GUID/metadata concepts).

Key Responsibilities

1. Policy deployment & hygiene
   • Import/test Titus policy updates from L3 in pilot OU; execute regression checklists in Office/Outlook; promote via change. Track coverage and client health.
2. End‑user & endpoint support
   • Troubleshoot Outlook/Office add‑in prompts, mandatory classification enforcement, protective markings, and save/send blocks; document KBs and FAQs.
3. Integration checks
   • Validate that Forcepoint DLP policies correctly consume Titus tags/metadata (spot checks, test artifacts, FP/FN feedback), and that Seclore rights templates trigger from labels in common workflows (email + attachments, shared docs). Escalate mis‑mappings to L3.
4. Monitoring, reporting & evidence
   • Maintain weekly KPIs: label adoption %, add‑in coverage %, DLP tag‑match rate, exception backlog, incident MTTR; export audit evidence (change tickets, test logs, screenshots).
5. Adoption & training
   • Run short enablement sessions; capture UX friction (false prompts, confusing labels) and propose tuning to L3. Reference Microsoft 365 data‑classification dashboards where applicable.
6. Change & incident management
   • Raise/execute standard changes (policy push, client updates), handle P2/P3 incidents, support P1 as hands‑on executor under L3 Lead; complete RCA tasks and preventive actions.

Requirements

• 2–4 years in Data Protection / Endpoint / M365 support, with 1+ year operating Fortra Titus/DCS (Office/Outlook add‑ins, labels, markings, policy deployments).
• Working knowledge of Forcepoint DLP (how it detects/uses classification metadata) and basic familiarity with Seclore classification‑driven protection.
• Strong Microsoft 365 user/admin literacy (Office client behavior, Outlook profiles, add‑ins, profile resets, basic tenant concepts; awareness of sensitivity labels).
• ITIL Incident/Change exposure; clear documentation and evidence habits for audits.
• Nice to have: Any vendor training/badges for Fortra/Titus; Forcepoint DLP admin exposure; basic understanding of label coexistence/GUIDs in M365.