DLP Policy Lead

The DLP Platform Owner & Policy Lead is responsible for end-to-end management and strategic direction of the Data Loss Prevention (DLP) platform, leveraging Microsoft Purview and Zscaler to deliver robust, enterprise-grade data protection. This role acts as the primary point of contact for the DLP platform lifecycle, vendor and partner coordination, policy governance, and KPI reporting. The DLP Platform Owner & Policy Lead works closely with cross‑functional stakeholders—including compliance, legal, business units, and the Security Operations Centre (SOC)—to uphold and continuously improve data security standards.

• Own and lead the Data Loss Prevention (DLP) platform strategy and lifecycle
  , managing Microsoft Purview and Zscaler environments to ensure security, performance, and operational excellence.

• Drive DLP governance and policy management
  , developing, reviewing, and enhancing policies to align with regulatory requirements, business objectives, and evolving cyber risks.

• Act as the technical lead and key stakeholder for DLP platforms
  , coordinating with vendors, third‑party partners, auditors, and internal teams to deliver new capabilities and platform improvements.

• Provide leadership for DLP operations and incident management
  , serving as the escalation point for complex incidents and ensuring effective response, investigation, and continuous improvement.

• Manage and mentor DLP resources
  , providing oversight, guidance, and support to DLP Analysts and Engineers to ensure effective policy enforcement and platform administration.

• Deliver executive reporting and performance insights
  , defining KPIs, producing management reports, and presenting recommendations that strengthen data protection and reduce organisational risk.

• Proven experience managing enterprise DLP platforms
  , particularly Microsoft Purview and Zscaler, with strong expertise in policy governance, platform administration, and data protection controls.

• Strong knowledge of data security, compliance, and regulatory requirements
  , with the ability to translate business and legal requirements into effective DLP policies and controls.

• Experience working with vendors, technology partners, and managed service providers
  , driving platform enhancements, integrations, and successful service delivery.

• Demonstrated incident management expertise
  , including collaboration with Security Operations teams to investigate, elevate, and resolve data security incidents.

• Excellent stakeholder management and communication skills
  , with the ability to influence technical and non‑technical audiences and build strong cross‑functional relationships.

• Strong analytical, reporting, and documentation abilities
  , capable of producing meaningful KPI reporting and presenting actionable insights to senior leadership.