The DLP Platform Owner & Policy Lead is responsible for end-to-end management and strategic direction of the Data Loss Prevention (DLP) platform, leveraging Microsoft Purview and Zscaler to deliver robust, enterprise-grade data protection. This role acts as the primary point of contact for the DLP platform lifecycle, vendor and partner coordination, policy governance, and KPI reporting. The DLP Platform Owner & Policy Lead works closely with cross functional stakeholders-including compliance, legal, business units, and the Security Operations Centre (SOC)-to uphold and continuously improve data security standards.
What you'll doOwn and lead the Data Loss Prevention (DLP) platform strategy and lifecycle, managing Microsoft Purview and Zscaler environments to ensure security, performance, and operational excellence.
Drive DLP governance and policy management, developing, reviewing, and enhancing policies to align with regulatory requirements, business objectives, and evolving cyber risks.
Act as the technical lead and key stakeholder for DLP platforms, coordinating with vendors, third party partners, auditors, and internal teams to deliver new capabilities and platform improvements.
Provide leadership for DLP operations and incident management, serving as the escalation point for complex incidents and ensuring effective response, investigation, and continuous improvement.
Manage and mentor DLP resources, providing oversight, guidance, and support to DLP Analysts and Engineers to ensure effective policy enforcement and platform administration.
Deliver executive reporting and performance insights, defining KPIs, producing management reports, and presenting recommendations that strengthen data protection and reduce organisational risk.
Proven experience managing enterprise DLP platforms, particularly Microsoft Purview and Zscaler, with strong expertise in policy governance, platform administration, and data protection controls.
Strong knowledge of data security, compliance, and regulatory requirements, with the ability to translate business and legal requirements into effective DLP policies and controls.
Experience working with vendors, technology partners, and managed service providers, driving platform enhancements, integrations, and successful service delivery.
Demonstrated incident management expertise, including collaboration with Security Operations teams to investigate, elevate, and resolve data security incidents.
Excellent stakeholder management and communication skills, with the ability to influence technical and non technical audiences and build strong cross functional relationships.
Strong analytical, reporting, and documentation abilities, capable of producing meaningful KPI reporting and presenting actionable insights to senior leadership.