Vulnerability Management Cybersecurity Data Protection (DLP) Lead

American IT Systems•Houston, TX

5d•Hybrid

About The Position

This is a contract role for a Vulnerability Management Cybersecurity Data Protection Lead in Houston, Texas. The position requires 4 days in-office and 1 day remote, with a duration of 6 months and potential for extension. The role focuses on leading the implementation and enhancement of Microsoft Purview Data Classification and DLP policies, designing and optimizing DLP policies, driving automation of DLP alert investigations, and developing sensitivity labeling frameworks. The lead will also analyze data classification trends, build operational reporting frameworks, lead AI security governance initiatives, establish SOPs for DLP investigations, ensure audit readiness, collaborate with stakeholders, mentor security analysts, lead integration of data protection capabilities, and oversee database security using IBM Guardium. Continuous improvement of enterprise data protection capabilities is a key objective.

Requirements

12+ years of experience in cybersecurity, data protection, or DLP operations, with strong focus on enterprise security platforms
Hands-on experience with Microsoft Purview (DLP, Information Protection, Sensitivity Labels) and M365 security ecosystem
Strong working knowledge of database security solutions such as IBM Guardium, including monitoring and protection of Oracle, SQL Server, and DB2 environments
Experience with SaaS Security Posture Management (SSPM/SPM) tools and cloud security governance across enterprise SaaS platforms
Exposure to AI security tools and governance frameworks (e.g., Onyx, Copilot security controls) for managing emerging AI risks
Strong understanding of data security, compliance frameworks (NIST, ISO, etc.), and risk management practices
Experience with automation, reporting, and security analytics tools to drive operational efficiency
Strong stakeholder management, leadership, and communication skills, with experience working across cross-functional teams

Nice To Haves

No Analysts only send Leads.

Responsibilities

Lead implementation and enhancement of Microsoft Purview Data Classification and DLP policies across Exchange, SharePoint, OneDrive, Teams, and endpoint environments
Design, implement, and optimize DLP policies and rules (conditions, thresholds, exceptions) to improve detection accuracy and reduce false positives
Drive automation of DLP alert investigations, including detection validation, triage workflows, and root cause analysis
Develop and enhance sensitivity labeling frameworks, including taxonomy, enforcement strategies, and enterprise-wide adoption
Analyze data classification trends and misclassifications, and coordinate user awareness and policy communication initiatives
Build and maintain operational reporting frameworks, including dashboards and cadence-based reporting (monthly/quarterly) for risk, incidents, and performance metrics
Lead AI security governance initiatives across Microsoft Copilot, Power Platform, and third-party AI integrations (including Onyx), focusing on posture assessments, guardrails, and risk mitigation
Establish and maintain standard operating procedures (SOPs), runbooks, and QA processes for DLP investigations and incident management
Ensure audit readiness and compliance, including documentation, evidence retention, and traceability for security events
Collaborate with security, compliance, IT, and business stakeholders to prioritize remediation activities and manage security backlogs
Mentor and guide security analysts, manage workload distribution, and ensure adherence to service-level agreements (SLAs)
Lead integration of data protection capabilities across enterprise security platforms, including SaaS Security Posture Management (SSPM/SPM) tools, ensuring visibility, governance, and policy enforcement across cloud applications
Oversee database security and monitoring initiatives using IBM Guardium, including protection of Oracle, SQL Server, and DB2 environments, ensuring compliance and sensitive data protection
Drive continuous improvement of enterprise data protection capabilities through automation, tool integration, and alignment with broader cybersecurity architecture