Data Loss Prevention Specialist (Contract)

Job Responsibilities High-Value Asset Governance & Identification • Engage business and control functions to identify and inventory potential HVAs, such as audit reports, inspection materials, network infrastructure diagrams, system architecture/security documentation, source code and other highly sensitive information. • Analyse existing HVA submissions and rationalise overly broad or granular classifications. • Develop consistent criteria for identifying and categorising which HVAs are suitable for DLP monitoring across APAC offices and functions. • Translate HVAs into technically implementable detection methodology, including keywords, dictionaries, sensitivity labels, classifiers or other appropriate detection mechanisms. • Assess false-positive and false-negative implications before implementation and support controlled testing and tuning. • Establish traceability from identified information risk or HVA through to DLP detection logic, control response and monitoring. DLP Business & Technical Analysis • Act as the bridge between business/risk requirements and technical implementation. • Understand Microsoft Purview DLP concepts, including policies, rules, conditions, exceptions, sensitive information types, sensitivity labels and policy tips. • Analyze DLP alerts and rule performance to identify areas for tuning and enhancement. • Understand information flows across email endpoints and other relevant transmission channels. • Facilitate discussions between business stakeholders and technical engineers where requirements cannot be implemented directly. • Challenge requirements where proposed DLP controls are impractical, overly broad or likely to create excessive business disruption. • Assist in determining appropriate control responses such as monitoring, user warning, justification, and blocking or escalation. • Document business and functional requirements in a manner that can be readily translated into technical configuration. Overall DLP Governance and Project Management • Support strategic DLP transformation initiatives, including hands-on support to enable smooth implementation of Phase 3 Microsoft Purview DLP for in-scope countries. • Support the team in overall project management, including maintaining clear project documentation and audit trails, coordinating working groups and stakeholder meetings to drive follow-up actions, preparation of project status reporting and management updates. Requirement • Approximately five to eight years of relevant experience in DLP, information protection, information security, data protection, technology risk or a closely related discipline. • Strong functional experience with Microsoft Purview DLP including practical experience in policy design, requirements, testing, tuning and effectiveness assessment. • Good knowledge of DLP coverage across email, endpoint, web and other channels. • Experience in handling HVA /supporting data-classification programmes, designing, tuning or testing DLP policies, SITs, classifiers, labels or document-fingerprinting approaches. • Strong analytical, stakeholder management, presentation and communication skills. • Good proactive working attitude, ability to work cohesively as a team and drive outcomesindependently.