Data Security - DLP Architect

About the role

This role combines hands-on data security operations with architecture and governance. It covers first-line triage and incident handling across DLP, classification and IRM platforms, plus platform management, policy enforcement and stakeholder reporting.

Key responsibilities

• Provide first-line triage for alerts and incidents, run runbooks and escalate within SLA, then lead advanced investigations, root cause analysis and custom rules/scripts
• Own the full incident lifecycle and maintain an issues register, producing incident reports, RCAs and corrective actions
• Improve detection fidelity and reduce false positives through tuning, content updates and automation, and maintain playbooks and runbooks
• Work with governance and legal teams to design and enforce data security policies, and ensure auditability for compliance
• Manage deployment, hardening, patching, backups and monitoring of DLP, classification and IRM servers (on-prem and cloud), including integrations with Microsoft 365, Exchange, SharePoint, Box and OneDrive
• Design solution architectures, threat model changes and lead transitions, migrations and vendor replacements
• Report KPI dashboards to SOC, IT ops, legal/compliance and business units, and support audits

Required profile

• Bachelor's degree in computer science, information security or a related field (Master's or relevant certifications preferred)
• 8+ years in data security roles with hands-on DLP, data classification and IRM experience
• L1-L3 operational background and proven experience managing DLP products (e.g. Forcepoint, Symantec/Digital Guardian, McAfee DLP), classification tools (Boldon James or similar, Titus) and IRM (Seclore, Purview)
• Strong server administration (Windows/Linux), virtualization and cloud exposure (Azure/AWS)
• Knowledge of encryption, PKI, HSMs and secure key management (Thales or similar)
• Familiarity with SIEM (Microsoft Sentinel), EDR, email gateways and MDM integrations
• Solid understanding of CIS, NIST, ISO27001 and data privacy regulations

Required skills

• Scripting and automation (PowerShell, Python)
• Excellent troubleshooting and communication skills with cross-functional teams and senior stakeholders
• Desirable: CISSP, CISM, CCSP, vendor-specific DLP/IRM certifications, Azure/AWS or Microsoft 365 security certifications, ITIL Foundation