DLP Business Analyst

We are seeking a hands-on Business Analyst to support the next phase of our APAC Data Loss Prevention (DLP) project. The role will operate at the intersection of business, risk and technology, with responsibility for translating information-protection requirements into practical DLP use cases and driving implementation across multiple countries.

Job responsibilities

Microsoft Purview DLP Implementation

• Conduct current-state assessments covering existing DLP solutions, policies, rules, channels, workflows and local requirements.

• Perform gap analysis between existing country DLP arrangements and the regional/global Microsoft Purview DLP framework.
• Gather, analyze and document business, regulatory and technical requirements and translate them into DLP use cases and implementation requirements.
• Coordinate with country stakeholders, Regional Risk, Information Security, Compliance, and Technology teams.
• Maintain implementation plans, RAID logs, dependencies, decisions and action trackers.
• Coordinate configuration, SIT/UAT, defect resolution, deployment readiness, go-live and post-implementation activities.
• Develop test scenarios and expected results and support validation of DLP rule effectiveness.
• Support transition from project implementation into the regional DLP BAU operating model and maintain appropriate documentation, approvals and evidence.

Business Analysis, Governance & Stakeholder Management

• Perform end-to-end planning, coordination, monitoring, and execution of Microsoft Purview DLP implementation across in-scope countries.
• Proactive handling of all forms of communication with business users to better understand their business requirements and address their queries in a professional and timely manner.
• Support the overall project management including proper documentation of risks, issues, dependencies, decisions to closure and escalation of delivery risks.
• Coordinate working groups and stakeholder meetings to drive follow-up actions.
• Facilitate regular meetings with relevant regional management and prepare project status reporting and management updates.

Candidate Profile

• Minimum three years of relevant experience in Business Analysis, Technology Risk, Information Security, Data Protection, or related transformation programmes.
• Strong track record in end-to-end project delivery, requirements gathering, gap analysis, testing and stakeholder coordination.
• Good understanding of DLP and/or practical experience with Microsoft Purview DLP including knowledge of sensitivity labels, Sensitive Information Types and data classifiers.
• Ability to translate business and risk requirements into clear functional and technical requirements.
• Strong analytical, stakeholder management, documentation, presentation and communication skills.
• Ability to independently drive outcomes rather than operate solely as a project coordinator.