Data Loss Prevention Administrator (Puerto Rico)

RTX•Santa Isabel, PR

8d•Remote

About The Position

The Data Loss Prevention (DLP) Administrator is a technical role responsible for the administration, engineering, troubleshooting, and operational support of the organization’s DLP environment. Serving as a Level 3 technical escalation point, this role resolves complex DLP incidents, policy issues, endpoint enforcement challenges, and data protection requirements. The position partners closely with Cybersecurity, Security Operations, Endpoint, Identity, Messaging, Collaboration, Compliance, Privacy, and business teams to implement and maintain effective data protection controls across the environment. The role leads the day-to-day technical execution of the DLP program, including policy configuration, testing, deployment, monitoring, incident investigation, troubleshooting, tuning, and optimization. It also supports the full DLP lifecycle: Discover → Design → Test → Pilot → Deploy → Monitor → Tune → Recertify → Retire. The successful candidate will bring strong hands-on DLP experience and excellent troubleshooting skills, with the ability to translate security and compliance requirements into effective technical controls while minimizing unnecessary business disruption.

Requirements

A University Degree or equivalent experience and minimum 5 years prior relevant experience, or an Advanced Degree in a related field and minimum 3 years experience.
5+ years of experience in cybersecurity, information protection, data security, systems administration, or a related technical discipline.
3+ years of hands-on experience administering or engineering Microsoft Purview DLP or comparable enterprise DLP technology.
Experience working with Microsoft 365 services and security/compliance capabilities.
Experience administering DLP policies across multiple Microsoft 365 workloads.
Experience investigating and troubleshooting DLP incidents and policy behavior.
Experience with policy testing, deployment, monitoring, tuning, and troubleshooting.
Experience with Microsoft Entra ID and enterprise identity concepts.
Experience with endpoint management and Windows operating system security concepts.
Experience using PowerShell for administration, troubleshooting, or automation.

Nice To Haves

Advanced hands-on experience with Microsoft Purview DLP and Information Protection, including Sensitivity Labels, Insider Risk Management, Audit, eDiscovery, Data Lifecycle Management, sensitive information types, trainable classifiers, EDM, and advanced classification capabilities.
Experience administering DLP across Microsoft 365 and endpoint environments, including Exchange Online, SharePoint, OneDrive, Teams, Microsoft 365 Copilot, Microsoft Defender for Endpoint, Endpoint DLP, and technologies such as Microsoft Intune or Configuration Manager.
Strong experience with PowerShell and/or Microsoft Graph automation, including developing DLP dashboards, operational reports, metrics, and integrations with Microsoft Sentinel, SIEM, SOAR, or other security platforms.
Strong troubleshooting experience across Microsoft 365 authentication, identity, endpoints, and applications, including determining root cause and working with Microsoft Support to resolve complex Purview and Microsoft 365 issues.
Knowledge of data protection, Zero Trust, least privilege, identity and endpoint security, privacy, and regulatory requirements, including GDPR, CCPA/CPRA, HIPAA, PCI DSS, SOX, or similar requirements.
Experience supporting complex or highly regulated enterprise environments and creating technical runbooks, SOPs, troubleshooting guides, and operational documentation.
Experience mentoring junior analysts and serving as a technical escalation point, with strong analytical, problem-solving, written, and verbal communication skills.
Ability to work independently and effectively across cybersecurity, infrastructure, compliance, privacy, and business teams to resolve complex issues and implement effective data protection solutions.
Microsoft certifications in Security, Compliance, Identity, or Microsoft 365 are preferred.

Responsibilities

Administer and maintain DLP policies, rules, alerts, notifications, enforcement actions, sensitive information types, classifiers, conditions, exceptions, thresholds, and policy actions.
Configure and maintain DLP across Microsoft 365 workloads, including Exchange Online, SharePoint, OneDrive, Teams, and supported endpoint scenarios, including Endpoint DLP and associated device controls.
Execute the DLP lifecycle: Discover → Design → Test → Pilot → Deploy → Monitor → Tune → Recertify → Retire, translating approved business and security requirements into effective technical controls.
Build, test, pilot, deploy, and tune DLP policies based on incident trends, false positives, business feedback, and security requirements while following appropriate change controls.
Serve as the primary Level 3 technical escalation point for complex DLP issues, including policy evaluation, conflicts, endpoint enforcement, exclusions, exceptions, alerts, notifications, and unexpected behavior.
Monitor DLP health and effectiveness, investigate configuration and enforcement issues, and troubleshoot DLP behavior across Microsoft 365 workloads and managed endpoints.
Follow change and release management processes, including implementation and rollback planning, testing, production coordination, and validation following Microsoft 365 service or organizational changes.
Conduct periodic policy reviews and recertification, implement approved changes, and maintain accurate DLP configuration standards, administrative documentation, operational procedures, and change records.
Develop and maintain troubleshooting procedures and knowledge articles, and establish clear roles and responsibilities across DLP engineering, operations, security operations, and business teams.
Partner with application and data owners, Endpoint, Identity, Security Architecture, and other stakeholders to strengthen DLP controls and develop training and awareness programs that improve organizational understanding.