DLP Operations Associate

Role Overview

The DLP Operations Associate will oversee monitoring, examining, and handling incidents related to Data Loss Prevention across diverse platforms such as Email, Endpoint devices, Web, Cloud Applications, USB devices, Printing, and Network channels. This role is pivotal in supporting daily operational duties, managing policies, handling exceptions, responding to incidents, ensuring compliance, and optimizing the DLP platform to secure sensitive information for both the company and its clients.

Key Responsibilities

• Monitor alerts and incidents from DLP systems across multiple channels including Web, Email, Endpoint, USB, Print, and Cloud.
• Investigate reported incidents to identify genuine threats by distinguishing true positives from false alarms.
• Conduct initial assessments, containment measures, and escalate issues based on their severity.
• Maintain detailed documentation of investigations ensuring records are audit-ready.
• Ensure compliance with service level agreements (SLAs) for incident response and closure timelines.
• Handle ServiceNow tickets related to incidents, service requests, changes, and problems.
• Liaise with Infrastructure, Security Operations, Privacy, Compliance teams, and other business stakeholders for coordinated responses.
• Take part in managing major incidents and facilitate root cause analysis activities.
• Develop, update, and test DLP policies, dictionaries, rules (EDM/IDM), regex patterns, and classifiers for improved detection capabilities.
• Perform ongoing tuning of policies to minimize false positives and increase detection precision.
• Regularly validate DLP policies to assess effectiveness and compliance.
• Process exceptions to DLP policies by adhering to approved governance procedures.
• Maintain an inventory of exceptions and conduct periodic revalidation of these exceptions.
• Assist with risk assessments and recommend compensating controls as needed.

Platform Support Responsibilities

• Administer and support Forcepoint DLP and Zscaler DLP platforms.
• Monitor the health of DLP agents, consoles, policy synchronization, and system uptime.
• Support platform upgrades, migrations, and implementation of changes.
• Conduct regular health checks and compliance verifications of the DLP infrastructure.

Required Qualifications and Skills

• Comprehensive understanding of Data Loss Prevention concepts and security controls.
• Practical experience with Zscaler DLP and Forcepoint DLP technologies.

Eligibility

Open to candidates holding any graduate degree.