DLP Technical Specialist

We are seeking a technically strong and risk-focused DLP & Information Protection Specialist to enhance the effectiveness and maturity of our APAC Data Loss Prevention (DLP) control environment. Acting as the functional bridge between information-risk requirements and technical implementation, you will translate complex protection requirements into practical, risk-based and effective DLP controls. The role does not own the Microsoft Purview platform or perform production configuration. Instead, it provides information-risk expertise, functional control design and specialist oversight to ensure information-protection requirements are translated into effective technical solutions. Job Responsibilities • High Value Asset Governance & Identification • Engage business and control functions to identify and inventory potential HVAs, such as Audit reports, regulatory inspection materials, network infrastructure diagrams, system architecture/security documentation, source code and other highly sensitive information. • Analyze existing HVA submissions and rationalize overly broad or granular classifications. • Develop consistent criteria for identifying and categorizing which HVAs are suitable for DLP monitoring across APAC offices and functions. • Translate HVAs into technically implementable detection methodology, including keywords, dictionaries, sensitivity labels, classifiers or other appropriate detection mechanisms. • Assess false-positive and false-negative implications before implementation and support-controlled testing and tuning. • Establish traceability from identified information risk or HVA through to DLP detection logic, control response and monitoring. 2. DLP-Business & Technical Analysis • Act as the bridge between business/risk requirements and technical implementation. • Understand Microsoft Purview DLP concepts including policies, rules, conditions, exceptions, Sensitive Information Types, sensitivity labels and policy tips. • Analyze DLP alerts and rule performance to identify areas for tuning and enhancement. • Understand information flows across email, endpoints and other relevant transmission channels. • Facilitate discussions between business stakeholders and technical engineers where requirements cannot be implemented directly. • Challenge requirements where proposed DLP controls are impractical, overly broad or likely to create excessive business disruption. • Assist in determining appropriate control responses such as monitoring, user warning, justification, blocking or escalation. • Document business and functional requirements in a manner that can be readily translated into technical configuration. • • 3. Overall DLP Governance and Project Management • Support strategic DLP transformation initiatives, including hands-on support to enable smooth implementation of Phase 3 Microsoft Purview DLP for in-scope countries. • Support the team in overall project management including maintaining clear project documentation and audit trails, coordinating working groups and stakeholder meetings to drive follow-up actions, preparation of project status reporting and management updates. Candidate Profile • Approximately five to eight years of relevant experience in DLP, information protection, information security, data protection, technology risk or a closely related discipline. • Strong functional experience with Microsoft Purview DLP including practical experience in policy design, requirements, testing, tuning and effectiveness assessment. • Good knowledge of DLP coverage across email, endpoint, web and other channels. • Experience in handling HVA / supporting data-classification programmes, designing, tuning or testing DLP policies, SITs, classifiers, labels or document-fingerprinting approaches. • Strong analytical, stakeholder management, presentation and communication skills. • Good proactive working attitude, ability to work cohesively as a team and drive outcomes independently.