Endpoint Data Loss Prevention Lead

The Vanguard Group; Malvern (Chester County); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Vanguard seeks an experienced information security professional to lead the migration from legacy endpoint DLP to cloud-delivered protection platforms. You will design workflows, automate policy deployment through REST APIs and CI/CD, and report key metrics to leadership.

The role requires deep DLP expertise (Zscaler and Digital Guardian), scripting skills, and experience with SIEM tools. A hybrid work model supports collaboration and learning.

Qualifications

• 8+ years in information security with at least 5 years hands-on endpoint DLP engineering/operations.
• Bachelor's degree in Cybersecurity/IT/CS or equivalent experience.
• Deep hands-on expertise with Zscaler Endpoint DLP and Zscaler Client Connector.
• Hands-on with Digital Guardian; DGMC policy, deployment and incident workflows.
• Led endpoint security migration/consolidation at enterprise scale.
• 4+ years scripting/automation (Python/PowerShell/Shell) for policy mgmt & reporting.
• 3+ years with security telemetry & SIEM (Elastic/Splunk) for incident analysis.
• Proficient with JIRA, Confluence, ServiceNow; Agile/Scrum delivery.
• Preferred: Microsoft Purview info protection, labeling; GenAI/LLM data controls.
• Familiar with UEBA and insider risk analytics; regulatory exam support.

Responsibilities

• Leads migration from legacy endpoint DLP to cloud-delivered protection platforms.
• Designs end-user notification, coaching, and justification workflows balancing control vs productivity.
• Builds automation and integrations via REST APIs, SIEM/SOAR pipelines, and CI/CD.
• Defines and reports metrics: coverage, detection efficacy, MT triage, policy drift.
• Evaluates emerging data security technologies; mentors engineers.
• Participates in special projects and knowledge transfer initiatives.

Skills

Endpoint DLP engineering

Python

PowerShell

Shell scripting

REST APIs

SIEM analytics

JIRA

Confluence

Agile/Scrum

ServiceNow

MS Purview

Digital Guardian

Zscaler Endpoint DLP

Zscaler Client Connector

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Zscaler Endpoint DLP

Zscaler Client Connector

Digital Guardian

Elastic

Splunk

Job description

This Hybrid Role (in office Tues-Wed-Thurs) is based in Malvern, PA (HQ), Charlotte, NC or Dallas, TX.

Core Responsibilities

Leads the technical migration from legacy endpoint DLP agents (e.g., Digital Guardian) to cloud-delivered endpoint protection platforms (e.g., Zscaler Client Connector / Zscaler Endpoint DLP), including agent coexistence strategy, policy parity mapping, and phased cutover. Designs and enforces end-user notification (EUN), coaching, and justification workflows that balance control effectiveness against user friction and productivity impact. Builds automation and integrations via REST APIs, SIEM/SOAR pipelines, and CI/CD to reduce manual effort in policy deployment, incident enrichment, and reporting. Defines and reports program metrics - coverage, detection efficacy, false positive rate, mean time to triage, and policy drift - to security leadership. Evaluates emerging data security technologies. Mentors junior engineers and analysts, builds team technical depth, and leads knowledge transfer and cross-training initiatives. Participates in special projects and performs other duties as assigned.

Qualifications

• Required Minimum 8 years in information security, with at least 5 years of hands-on endpoint DLP engineering and operations.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field; equivalent professional experience considered.
• Deep hands-on expertise with Zscaler Endpoint DLP (ZDP) / Zscaler Data Protection, including Zscaler Client Connector, forwarding profiles, and endpoint policy configuration.
• Hands-on expertise with Digital Guardian, including DGMC policy and rule authoring, agent deployment and upgrade management, control set design, and incident workflow administration.
• Demonstrated experience leading an endpoint security agent migration or consolidation at enterprise scale.
• 4+ years of scripting and automation experience (Python, PowerShell, Shell) for endpoint policy management, reporting, and API-driven integration.
• 3+ years working with security telemetry and SIEM platforms (Elastic, Splunk, or equivalent) for endpoint DLP incident analysis and reporting.
• Proficiency in JIRA, Confluence, ServiceNow, and Agile/Scrum delivery.
• Preferred Experience with Microsoft Purview Information Protection, sensitivity labeling, and Microsoft 365 oversharing remediation.
• Experience implementing data controls for GenAI and LLM usage, including prompt and upload inspection.
• Familiarity with UEBA and insider risk analytics platforms.
• Industry certifications: CISSP, CCSP, GCFA, GCED, or vendor certifications in Zscaler (ZDTA, ZCCP-DP) or Digital Guardian.
• Experience supporting regulatory examination and audit evidence production in a financial services or other highly regulated environment.

Competencies

• Operates with autonomy in ambiguity; translates emerging data risks into actionable control requirements.
• Communicates technical risk clearly to non-technical and executive audiences.
• Influences across organizational boundaries without direct authority.
• Balances control rigor against business enablement and user experience.

Special Factors Sponsorship Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission - we're on a mission. To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.

Vanguard, one of the world's leading investment management companies, serves individual investors, institutions, employer-sponsored retirement plans, and financial professionals. We have a diverse and talented crew with a culture that promotes teamwork, along with an unwavering focus on serving our clients' best interests.