DLP Strategy Lead: Data Protection & Security

White & Case LLP; Tampa (FL); On-site; USD 120,000 - 170,000; Full time

Job summary

White & Case LLP seeks an experienced Specialist, Data Loss Prevention (DLP) to design, implement, and manage data-protection controls firm-wide. You will partner across Security, Legal, Privacy, IT, and risk teams to safeguard client and firm data while enabling attorneys and professionals to work securely.

The role requires deep DLP expertise, strong investigation skills, and fluency in English, with experience across Microsoft 365, endpoints, cloud apps, and data exfiltration channels.

Qualifications

• 5+ years of experience in security, investigations, compliance, or related work.
• Fluency in English required; international experience preferred.
• Strong written and verbal communication skills; ability to translate complex issues for non-technical audiences.
• Experience with DLP platforms and data-protection controls across multiple channels.

Responsibilities

• Lead DLP strategy, governance, and multi-year roadmaps.
• Define DLP controls based on data sensitivity, user role, and regulatory obligations.
• Monitor alerts, investigate incidents, preserve evidence, and maintain defensible case files.
• Expand DLP coverage across Microsoft 365, endpoints, cloud apps, and collaboration platforms.
• Mentor junior staff and translate security obligations into practical controls.

Skills

DLP expertise

Investigation discipline

Communication skills

Regulatory awareness

Tools

Microsoft Purview

Forcepoint

Netskope

Zscaler

Broadcom/Symantec

Splunk

Job description

White & Case LLP seeks an experienced Specialist, Data Loss Prevention (DLP) to design, implement, and manage data-protection controls firm-wide. You will partner across Security, Legal, Privacy, IT, and risk teams to safeguard client and firm data while enabling attorneys and professionals to work securely.

The role requires deep DLP expertise, strong investigation skills, and fluency in English, with experience across Microsoft 365, endpoints, cloud apps, and data exfiltration channels.