Job Description

We are seeking a technically strong and risk-focused DLP & Information Protection Specialist to enhance the effectiveness and maturity of our APAC Data Loss Prevention (DLP) control environment.

Acting as the functional bridge between information-risk requirements and technical implementation, you will translate complex protection requirements into practical, risk-based and effective DLP controls. The role does not own the Microsoft Purview platform or perform production configuration. Instead, it provides information-risk expertise, functional control design and specialist oversight to ensure information-protection requirements are translated into effective technical solutions.

Job Responsibilities

High Value Asset Governance & Identification

Engage business and control functions to identify and inventory potential HVAs, such as Audit reports, regulatory inspection materials, network infrastructure diagrams, system architecture/security documentation, source code and other highly sensitive information.
Analyze existing HVA submissions and rationalize overly broad or granular classifications.
Develop consistent criteria for identifying and categorizing which HVAs are suitable for DLP monitoring across APAC offices and functions.
Translate HVAs into technically implementable detection methodology, including keywords, dictionaries, sensitivity labels, classifiers or other appropriate detection mechanisms.
Assess false-positive and false-negative implications before implementation and support-controlled testing and tuning.
Establish traceability from identified information risk or HVA through to DLP detection logic, control response and monitoring.

2. DLP-Business & Technical Analysis

Act as the bridge between business/risk requirements and technical implementation.
Understand Microsoft Purview DLP concepts including policies, rules, conditions, exceptions, Sensitive Information Types, sensitivity labels and policy tips.
Analyze DLP alerts and rule performance to identify areas for tuning and enhancement.
Understand information flows across email, endpoints and other relevant transmission channels.
Facilitate discussions between business stakeholders and technical engineers where requirements cannot be implemented directly.
Challenge requirements where proposed DLP controls are impractical, overly broad or likely to create excessive business disruption.
Assist in determining appropriate control responses such as monitoring, user warning, justification, blocking or escalation.
Document business and functional requirements in a manner that can be readily translated into technical configuration.
3. Overall DLP Governance and Project Management

Support strategic DLP transformation initiatives, including hands-on support to enable smooth implementation of Phase 3 Microsoft Purview DLP for in-scope countries.
Support the team in overall project management including maintaining clear project documentation and audit trails, coordinating working groups and stakeholder meetings to drive follow-up actions, preparation of project status reporting and management updates.

Candidate Profile

Approximately five to eight years of relevant experience in DLP, information protection, information security, data protection, technology risk or a closely related discipline.
Strong functional experience with Microsoft Purview DLP including practical experience in policy design, requirements, testing, tuning and effectiveness assessment.
Good knowledge of DLP coverage across email, endpoint, web and other channels.
Experience in handling HVA / supporting data-classification programmes, designing, tuning or testing DLP policies, SITs, classifiers, labels or document-fingerprinting approaches.
Strong analytical, stakeholder management, presentation and communication skills.
Good proactive working attitude, ability to work cohesively as a team and drive outcomes independently.