#TeamCandour are working with a global financial services client to source a Data Loss Prevention (DLP) Team Lead to establish and develop its dedicated DLP capability. As the first dedicated hire in this area, you will shape the strategy, operating model and roadmap, while taking ownership of data protection across web, endpoint, cloud and email environments. You will act as the subject matter expert for Zscaler DLP, Microsoft Purview and Mimecast, and build a small team of DLP Analysts, gradually transitioning day-to-day alert triage and investigation to them. You’ll work closely with Privacy, Legal, Security Operations, IT and Procurement to create effective controls that protect data while supporting business needs. The role calls for hands-on enterprise DLP experience, a sound understanding of GDPR and data classification, and strong incident management and stakeholder skills.
Their offices are based in the centre of York and they will be looking for office attendance of 2 days per week
Key responsibilities: DLP strategy and capability development
Establish and mature the DLP capability across web, email, AI and cloud platforms, setting the direction for how controls are designed, operated and improved. Define the operating model, processes and standards for the organisation’s DLP technologies, and assess existing configurations to identify opportunities to strengthen coverage and effectiveness. Develop a forward-looking roadmap that supports integration across platforms and aligns with the wider security strategy. Identify gaps between current tooling and business requirements, then recommend practical solutions. In particular, help ensure that data used to ground AI services is appropriately protected through the use of data security posture management (DSPM) tooling.
Key responsibilities: Policy and control design
Design, implement and continually refine DLP policies across Zscaler, Microsoft Purview and Mimecast, covering relevant web, cloud, endpoint and email controls. Work with Privacy, Legal and Security teams to ensure policies reflect GDPR and other relevant regulatory requirements. Translate data classification standards into detection rules that can be enforced consistently across platforms. Tune policies to reduce risk while maintaining a positive user experience, improving detection quality and limiting false positives and alert fatigue. Work with Procurement and relevant stakeholders on the sanctioning of applications where appropriate, ensuring decisions are considered alongside the organisation’s data protection needs.
Key responsibilities: Operational leadership and incident management
Oversee the monitoring and triage of DLP alerts across web, endpoint, email and cloud environments, and act as the escalation point for complex, high-risk or sensitive data loss incidents. Establish standard operating procedures for alert handling across the relevant platforms, and promote consistent practices for investigation, response and documentation. Work closely with Security Operations and Privacy on escalation and breach assessment processes, helping ensure incidents are handled effectively and appropriately. Review alert trends and operational performance, using the findings to improve workflows, refine controls and strengthen the overall efficiency of DLP operations.
Act as the technical and functional subject matter expert for Zscaler DLP policies and traffic controls, Microsoft Purview DLP, Information Protection and Insider Risk capabilities, and Mimecast email DLP and content inspection. Keep abreast of platform updates, new features and emerging developments in DLP, assessing their relevance to the organisation’s needs. Lead configuration reviews, policy-tuning exercises and platform optimisation initiatives to improve protection and operational effectiveness. Provide guidance and training to internal teams on DLP capabilities and data protection practices, helping colleagues understand how controls work and how to apply them appropriately.
Key responsibilities: Team leadership and development
Build and lead a small team of DLP Analysts, including recruiting and onboarding team members as the function develops. Set clear workflows, responsibilities and performance expectations, and support the team through coaching, mentoring and ongoing development. Over time, transition day-to-day alert triage and investigation to the analysts, while retaining oversight of complex escalations and the overall effectiveness of the capability. Encourage continuous improvement and operational excellence, helping the team develop consistent approaches to alert handling and investigation. Candidates who have previously led or built teams, or who are ready to step into a leadership role, will be well placed to take on this responsibility.
Key responsibilities: Stakeholder engagement and reporting
Partner with Privacy, Legal, IT, Security Operations and Procurement on DLP initiatives, building strong working relationships across teams. Communicate data protection risks, operational insights and recommendations clearly to senior stakeholders. Provide regular reporting on alert volumes and trends, incident severity and response times, policy effectiveness and false-positive rates, using these measures to inform decisions and improvements. Support audits, compliance reviews and regulatory enquiries related to data protection, working with relevant teams to provide appropriate information. Strong communication and stakeholder management will be important in helping the DLP function operate effectively across the organisation.
Curious? We’re always available to talk through the finer details reach out anytime!
Data Loss Prevention Lead employer: Candour Solutions
Join a forward-thinking company in Chester that values innovation and collaboration, offering a dynamic work culture where your contributions truly matter. With a strong focus on employee growth, you'll have access to ongoing training and development opportunities, ensuring you stay at the forefront of technology. Enjoy the flexibility of a hybrid working model while being part of a team that is passionate about digital transformation and making a real impact.
