Specialist, Data Loss Prevention

Team SummaryNAPosition Summary We are seeking an experienced Specialist, Data Loss Prevention (DLP) to lead the design, implementation, and ongoing management of data-protection and information-security controls across the firm. This role safeguards sensitive client, attorney, financial, privileged, and firm data while enabling attorneys and business professionals to work securely and efficiently.

The ideal candidate combines deep technical expertise in DLP and information protection with a strong understanding of the confidentiality, privacy, security, and regulatory requirements of a law firm. The role partners with Information Security, IT, Risk, Compliance, Privacy, Legal, and business stakeholders to identify data risks and implement effective controls across endpoints, email, Microsoft 365, cloud applications, collaboration platforms, SaaS environments, and other data channels.

Duties and Accountabilities The roles and responsibilities of this job include:

DLP Strategy & Program Leadership Serve as the firm’s subject-matter expert for Data Loss Prevention, information protection, and data-security controls.

Develop, maintain, and mature a risk-based DLP strategy, governance framework, operating model, and multi-year roadmap.

Define DLP controls based on data sensitivity, user role, business function, client requirements, regulatory obligations, and firm risk tolerance.

Assess DLP maturity, identify gaps, prioritize improvements, and report progress through meaningful metrics, dashboards, and executive updates and reduce SOC false positives.

Monitoring, Investigations & Incident Response Review SOC escalations and assess alerts based on content, user role, authorization, and normal business workflows.

Resolve false positives and sanctioned activity through manager, data-owner, or business confirmation as appropriate.

Lead high-risk investigations, preserve evidence, document findings, and maintain defensible case files.

Classify incidents as compromised account, accidental or negligent mishandling, or deliberate/repeated violation, and route each accordingly.

Prepare clear recommendations and Legal handoff packages for General Counsel, HR, and other stakeholders as needed.

Coordinate with Privacy and Legal on monitoring scope, confidentiality, notice, and need-to-know access.

Identify trends indicating control weaknesses, insider-risk concerns, compromised accounts, or recurring policy violations.

Program building

Design, maintain, and document DLP policies, rules, detection logic, workflows, exceptions, and enforcement actions.

Expand DLP coverage across Microsoft 365, endpoints, email, cloud, collaboration, SaaS, web, removable media, and other exfiltration paths.

Tune policies using classification, sensitivity labels, content inspection, context, and user behavior to improve alert quality and reduce business disruption.

Help define and document the standard operating procedures, disposition taxonomy, escalation criteria, and SLAs between SOC and Legal.

As the practice scales, provide technical leadership, mentorship to junior
-level team members on casework and evidentiary discipline, and best practices for DLP implementation, testing, maintenance, investigations, and reporting.

Translate client-specific security obligations, outside counsel guidelines, contractual requirements, legal holds, records-management needs, and privacy obligations into practical DLP controls.

Support client assessments, audits, due diligence, questionnaires, and evidence requests related to DLP, monitoring, information barriers, insider risk, and data-exfiltration controls.

Ensure DLP investigations involving attorneys, sensitive matters, or privileged information follow appropriate escalation, confidentiality,…