Data Loss Prevention Specialist (Contract)

ICON OUTSOURCING; Singapore; On-site; SGD 140,000 - 200,000; Full time

Job summary

ICON OUTSOURCING seeks a DLP governance expert to lead high-value asset identification, policy design and APAC DLP deployment leveraging Microsoft Purview. You will bridge business risk requirements with technical implementation and drive testing, tuning and stakeholder collaboration.

The role covers cross-functional engagement, engagement of control functions, and ensuring traceability from risk to detection logic while guiding strategic transformation initiatives across in-scope APAC countries.

Qualifications

• 5–8 years of experience in DLP, information protection, information security, data protection or closely related discipline.
• Strong experience with Microsoft Purview DLP including policy design, requirements, testing, tuning and effectiveness assessment.
• Good knowledge of DLP coverage across email, endpoint, web and other channels.
• Experience handling HVA / supporting data-classification programmes and designing, tuning or testing DLP policies, SITs, classifiers or document-fingerprinting approaches.

Responsibilities

• Engage business and control functions to identify and inventory potential HVAs, such as audit reports, inspection materials, network diagrams, system architecture/security documentation, source code and other highly sensitive information.
• Analyse existing HVA submissions and rationalise overly broad or granular classifications.
• Develop consistent criteria for identifying and categorising HVAs suitable for DLP monitoring across APAC offices and functions.
• Translate HVAs into technically implementable detection methodology, including keywords, dictionaries, sensitivity labels, classifiers or other detection mechanisms.
• Assess false-positive and false-negative implications before implementation and support controlled testing and tuning.
• Establish traceability from identified information risk or HVA through to DLP detection logic, control response and monitoring.
• Act as the bridge between business/risk requirements and technical implementation.
• Understand Microsoft Purview DLP concepts, including policies, rules, conditions, exceptions, sensitive information types, sensitivity labels and policy tips.
• Analyze DLP alerts and rule performance to identify areas for tuning and enhancement.
• Understand information flows across email endpoints and other relevant transmission channels.
• Facilitate discussions between business stakeholders and technical engineers where requirements cannot be implemented directly.
• Challenge requirements where proposed DLP controls are impractical, overly broad or likely to create excessive business disruption.
• Assist in determining appropriate control responses such as monitoring, user warning, justification, and blocking or escalation.
• Document business and functional requirements in a manner that can be readily translated into technical configuration.
• Support strategic DLP transformation initiatives, including hands-on support to enable smooth implementation of Phase 3 Microsoft Purview DLP for in-scope countries.
• Support the team in overall project management, including maintaining clear project documentation and audit trails, coordinating working groups and stakeholder meetings to drive follow-up actions, preparation of project status reporting and management updates.

Skills

DLP governance

Microsoft Purview DLP

Policy design & testing

Stakeholder management

Tools

Microsoft Purview (DLP)

Job description

Job Responsibilities

High-Value Asset Governance & Identification

• Engage business and control functions to identify and inventory potential HVAs, such as audit reports, inspection materials, network infrastructure diagrams, system architecture/security documentation, source code and other highly sensitive information.
• Analyse existing HVA submissions and rationalise overly broad or granular classifications.
• Develop consistent criteria for identifying and categorising which HVAs are suitable for DLP monitoring across APAC offices and functions.
• Translate HVAs into technically implementable detection methodology, including keywords, dictionaries, sensitivity labels, classifiers or other appropriate detection mechanisms.
• Assess false-positive and false-negative implications before implementation and support controlled testing and tuning.
• Establish traceability from identified information risk or HVA through to DLP detection logic, control response and monitoring.

DLP Business & Technical Analysis

• Act as the bridge between business/risk requirements and technical implementation.
• Understand Microsoft Purview DLP concepts, including policies, rules, conditions, exceptions, sensitive information types, sensitivity labels and policy tips.
• Analyze DLP alerts and rule performance to identify areas for tuning and enhancement.
• Understand information flows across email endpoints and other relevant transmission channels.
• Facilitate discussions between business stakeholders and technical engineers where requirements cannot be implemented directly.
• Challenge requirements where proposed DLP controls are impractical, overly broad or likely to create excessive business disruption.
• Assist in determining appropriate control responses such as monitoring, user warning, justification, and blocking or escalation.
• Document business and functional requirements in a manner that can be readily translated into technical configuration.

Overall DLP Governance and Project Management

• Support strategic DLP transformation initiatives, including hands-on support to enable smooth implementation of Phase 3 Microsoft Purview DLP for in-scope countries.
• Support the team in overall project management, including maintaining clear project documentation and audit trails, coordinating working groups and stakeholder meetings to drive follow-up actions, preparation of project status reporting and management updates.

Requirement

• Approximately five to eight years of relevant experience in DLP, information protection, information security, data protection, technology risk or a closely related discipline.
• Strong functional experience with Microsoft Purview DLP including practical experience in policy design, requirements, testing, tuning and effectiveness assessment.
• Good knowledge of DLP coverage across email, endpoint, web and other channels.
• Experience in handling HVA /supporting data-classification programmes, designing, tuning or testing DLP policies, SITs, classifiers, labels or document-fingerprinting approaches.
• Strong analytical, stakeholder management, presentation and communication skills.
• Good proactive working attitude, ability to work cohesively as a team and drive outcomesindependently.