Data Loss Prevention Technical Specialist

Data Loss Prevention Technical Specialist

Risk Management Office for Asia - Corporate Risk Management (CORP)

Job Description

We are seeking a technically strong and risk-focused DLP Technical specialist to enhance the effectiveness and maturity of our APAC Data Loss Prevention (DLP) control environment.

In this regional role, you will help extend information protection beyond customer information and Personally Identifiable Information (PII) to the Bank's High Value Assets (HVAs) and other highly confidential information. Acting as the functional bridge between information-risk requirements and technical implementation, you will translate complex protection requirements into practical, risk-based and effective DLP controls. The role does not own the Microsoft Purview platform or perform production configuration. Instead, it provides information-risk expertise, functional control design and specialist oversight to ensure information-protection requirements are translated into effective technical solutions.

You will work closely with business, Risk, Information Security and Technology stakeholders across APAC to strengthen the Bank's information-protection capabilities while supporting strategic DLP transformation initiatives.

Job Responsibilities

1.      High Value Asset Governance &Identification

•     Engage business and control functions to identify and inventory potential HVAs, such as Audit reports, regulatory inspection materials, network infrastructure diagrams, system architecture/security documentation, source code and other highly sensitive information.

•     Analyze existing HVA submissions and rationalize overly broad or granular classifications.

•     Develop consistent criteria for identifying and categorizing which HVAs are suitable for DLP monitoring across APAC office sand functions.

•     Translate HVAs into technically implement able detection methodology, including keywords, dictionaries, sensitivity labels, classifiers or other appropriate detection mechanisms.

•     Assess false-positive and false-negative implications before implementation and support controlled testing and tuning.

•     Establish traceability from identified information risk or HVA through to DLP detection logic, control response and monitoring.

2.      DLP Business & Technical Analysis

•     Act as the bridge between business/risk requirements and technical implementation.

•     Understand Microsoft Purview DLP concepts including policies, rules, conditions, exceptions, Sensitive Information Types, sensitivity labels and policy tips.

•     Analyze DLP alerts and rule performance to identify areas for tuning and enhancement.

•     Understand information flows across email, endpoints and other relevant transmission channels.

•     Facilitate discussions between business stakeholders and technical engineers where requirements cannot be implemented directly.

•     Challenge requirements where proposed DLP controls are impractical, overly broad or likely to create excessive business disruption.

•     Assist in determining appropriate control responses such as monitoring, user warning, justification, blocking or escalation.

•     Document business and functional requirements in a manner that can be readily translated into technical configuration.

3.      Overall DLP Governance and Project Management

•     Support strategic DLP transformation initiatives, including hands-on support to enable smooth implementation of Phase 3 Microsoft Purview DLP for in-scope countries.

•      Support the team in overall project management including maintaining clear project documentation and audit trails, coordinating working groups and stakeholder meetings to drive follow-up actions, preparation of project status reporting and management updates.

Requirement

•    5-8 years of relevant experience in DLP, information protection, information security, data protection, technology risk or a closely related discipline.

•     Strong functional experience with Microsoft Purview DLP including practical experience in policy design,requirements, testing, tuning and effectiveness assessment.

•     Good knowledge of DLP coverage across email, endpoint, web and other channels.

•     Experience in handling HVA / supporting data-classification programmes, designing, tuning or testing DLP policies, SITs, classifiers, labels or document-fingerprinting approaches.

•     Strong analytical, stakeholder management, presentation and communication skills.

•     Good proactive working attitude, ability to work cohesively as a team and drive outcomes independently.

Skills

Business Analysis Planning, Materials Inspection, Net Asset Valuation, Negative Testing, Monitoring and Control System, HTRI Softwares, DLP, Classification, Sensitivity Analysis, Traceability, Data Dictionary, Inventory Control Processes, Audit Reports, Network Infrastructure, Keyword Analysis, Data Loss Prevention