Endpoint Data Loss Prevention Lead

Vanguard; Dallas (TX); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Vanguard seeks an eDLP Lead, Senior Specialist in Dallas to own design, engineering, and operational leadership of the enterprise endpoint DLP program across Windows and macOS. You will drive policy architecture, tuning, and platform health while leading the migration from legacy tooling to a cloud-delivered inline enforcement model.

You will collaborate with Security Operations, Insider Risk, Privacy, Legal and Infrastructure; mentor junior engineers; and report program metrics to security

Qualifications

• Minimum 8 years in information security with at least 5 years hands-on endpoint DLP engineering/ops.
• Bachelor’s degree in Cybersecurity, IT, CS or related field; equivalent experience considered.
• Deep hands-on expertise with Zscaler Endpoint DLP (ZDP) including Zscaler Client Connector and endpoint policy configuration.
• Hands-on expertise with Digital Guardian, including policy/rule authoring and agent deployment.
• Experience leading an enterprise-scale endpoint security agent migration or consolidation.
• 4+ years scripting/automation (Python/PowerShell/Shell) for policy management and reporting.
• 3+ years working with security telemetry and SIEM platforms (Elastic/Splunk).
• Proficiency with JIRA, Confluence, ServiceNow, and Agile/Scrum.

Responsibilities

• Leads migration from legacy endpoint DLP to cloud-delivered enforcement with agent coexistence and phased cutover.
• Designs end-user notification, coaching, and justification workflows balancing control and user productivity.
• Builds automation/integration via REST APIs, SIEM/SOAR pipelines, and CI/CD to reduce manual work.
• Defines and reports program metrics to leadership (coverage, detection efficacy, false positives, MTTR, policy drift).
• Evaluates emerging data security technologies.
• Mentors junior engineers and leads knowledge transfer and cross-training.
• Participates in special projects and other duties as assigned.

Skills

Endpoint DLP engineering

Security leadership

Mentorship

Executive communication

Automation

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Zscaler Endpoint DLP

Digital Guardian

REST APIs

SIEM (Elastic/Splunk)

JIRA

Confluence

ServiceNow

CI/CD

Job description

The eDLP Lead, Senior Specialist is responsible for the design, engineering, and operational leadership of the enterprise endpoint data loss prevention program. This role owns policy architecture, detection tuning, and platform health across Windows and macOS endpoints, and leads the technical execution of the organization's migration from legacy endpoint DLP tooling to a modern, cloud-delivered inline enforcement model. The individual partners closely with Security Operations, Insider Risk, Privacy, Legal, and Infrastructure teams to ensure sensitive data controls are effective, defensible, and aligned to regulatory obligations. This is a senior individual contributor role with significant influence over control strategy and mentorship responsibility for junior engineers.

This Hybrid Role (in office Tues-Wed-Thurs) is based in Malvern, PA (HQ), Charlotte, NC or Dallas, TX.

Core Responsibilities:

• Leads the technical migration from legacy endpoint DLP agents (e.g., Digital Guardian) to cloud-delivered endpoint protection platforms (e.g., Zscaler Client Connector / Zscaler Endpoint DLP), including agent coexistence strategy, policy parity mapping, and phased cutover.
• Designs and enforces end-user notification (EUN), coaching, and justification workflows that balance control effectiveness against user friction and productivity impact.
• Builds automation and integrations via REST APIs, SIEM/SOAR pipelines, and CI/CD to reduce manual effort in policy deployment, incident enrichment, and reporting.
• Defines and reports program metrics — coverage, detection efficacy, false positive rate, mean time to triage, and policy drift — to security leadership.
• Evaluates emerging data security technologies.
• Mentors junior engineers and analysts, builds team technical depth, and leads knowledge transfer and cross-training initiatives.
• Participates in special projects and performs other duties as assigned.

Qualifications:

Required

• Minimum 8 years in information security, with at least 5 years of hands‑on endpoint DLP engineering and operations.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field; equivalent professional experience considered.
• Deep hands‑on expertise with Zscaler Endpoint DLP (ZDP) / Zscaler Data Protection, including Zscaler Client Connector, forwarding profiles, and endpoint policy configuration.
• Hands‑on expertise with Digital Guardian, including DGMC policy and rule authoring, agent deployment and upgrade management, control set design, and incident workflow administration.
• Demonstrated experience leading an endpoint security agent migration or consolidation at enterprise scale.
• 4+ years of scripting and automation experience (Python, PowerShell, Shell) for endpoint policy management, reporting, and API-driven integration.
• 3+ years working with security telemetry and SIEM platforms (Elastic, Splunk, or equivalent) for endpoint DLP incident analysis and reporting.
• Proficiency in JIRA, Confluence, ServiceNow, and Agile/Scrum delivery.

Preferred

• Experience with Microsoft Purview Information Protection, sensitivity labeling, and Microsoft 365 oversharing remediation.
• Experience implementing data controls for GenAI and LLM usage, including prompt and upload inspection.
• Familiarity with UEBA and insider risk analytics platforms.
• Industry certifications: CISSP, CCSP, GCFA, GCED, or vendor certifications in Zscaler (ZDTA, ZCCP‑DP) or Digital Guardian.
• Experience supporting regulatory examination and audit evidence production in a financial services or other highly regulated environment.

Competencies:

• Operates with autonomy in ambiguity; translates emerging data risks into actionable control requirements.
• Communicates technical risk clearly to non-technical and executive audiences.
• Influences across organizational boundaries without direct authority.
• Balances control rigor against business enablement and user experience.

Special Factors

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in‑person learning, collaboration, and connection. We believe our mission‑driven and highly collaborative culture is a critical enabler to support long‑term client outcomes and enrich the employee experience.