Data Loss Prevention Team Lead

Hiscox•Lisbon, NY

11d

About The Position

The Data Loss Prevention (DLP) Team Lead will establish and lead a newly created DLP function, taking ownership of the organisation’s approach to data protection across network, endpoint, cloud, and email environments. The function is being created through a DLP project that is enhancing technologies and processes. As the first dedicated hire in this space, the role will contribute to DLP strategy, shape policy frameworks, and optimise existing technologies, including Zscaler DLP, Microsoft Purview, and Mimecast. The role will serve as the primary Subject Matter Expert (SME), oversee DLP alert operations, and build a small team of DLP Analysts to support day-to-day activities. The role establishes and matures DLP capabilities, defines operating models and standards, designs and refines policies, oversees alert monitoring and incident response, and provides technical guidance across DLP platforms. It also involves team leadership, stakeholder engagement, reporting, and support for audits, compliance reviews, and regulatory inquiries related to data protection.

Requirements

Strong hands-on experience with enterprise DLP technologies, specifically Zscaler DLP, Microsoft Purview (DLP, Information Protection, Insider Risk), and Mimecast (email DLP/content inspection).
Proven track record designing and implementing DLP policies across endpoint, network, cloud, and email control points.
Strong understanding of data protection regulations such as GDPR and of data classification frameworks.
Experience handling and managing security incidents and escalations.
Ability to tune DLP systems to improve signal-to-noise ratio and operational efficiency.
Experience leading or building teams, or readiness to step into a leadership role.
Strong communication and stakeholder management skills.

Responsibilities

Establish and mature the organisation’s DLP capability across web, email, AI, and cloud platforms.
Define DLP operating models, processes, and standards for Zscaler, Microsoft Purview, and Mimecast.
Assess current configurations and recommend enhancements to data protection coverage and effectiveness.
Develop a DLP capability roadmap, including platform integrations and alignment with the broader security strategy.
Identify gaps between tooling capabilities and business requirements and propose solutions.
Design, implement, and continuously refine DLP policies across Zscaler DLP, Microsoft Purview, and Mimecast.
Collaborate with Privacy, Legal, and Security teams to align policies with GDPR and other regulatory requirements.
Translate data classification standards into enforceable DLP detection rules across platforms.
Optimise policies to reduce risk while balancing user experience, false positives, and alert fatigue.
Manage sanctioning of applications with Procurement as appropriate.
Use DSPM tooling to help ensure data used for AI grounding in services is correctly secured.
Oversee monitoring and triage of DLP alerts across web, endpoint, email, and cloud environments.
Act as the primary escalation point for complex, high-risk, or sensitive data loss incidents.
Define and implement standard operating procedures for alert handling across Zscaler, Purview, and Mimecast.
Ensure consistent incident response, investigation, and documentation practices.
Work with Security Operations and Privacy teams on incident escalation and breach assessment processes.
Serve as the technical and functional SME for Zscaler DLP, Microsoft Purview DLP, Information Protection and Insider Risk, and Mimecast data protection and email DLP controls.
Stay current on platform features, updates, and emerging DLP trends.
Lead configuration reviews, tuning exercises, and platform optimisation initiatives.
Provide internal teams with guidance and training on DLP capabilities and data protection practices.
Recruit, onboard, and lead a team of DLP Analysts.
Transition day-to-day alert triage and investigation to the analyst team over time.
Define team workflows, responsibilities, and performance expectations; coach and develop team members.
Promote continuous improvement and operational excellence.
Partner with Privacy, Legal, IT, and Security Operations on DLP initiatives.
Report on DLP metrics, including alert volumes and trends, incident severity and response times, policy effectiveness, and false positive rates.
Communicate risks, insights, and recommendations to senior stakeholders.
Support data-protection audits, compliance reviews, and regulatory inquiries.