DLP Policy Lead

The DLP Platform Owner & Policy Lead is responsible for end-to-end management and strategic direction of the Data Loss Prevention (DLP) platform, leveraging Microsoft Purview and Zscaler to deliver robust, enterprise-grade data protection. This role acts as the primary point of contact for the DLP platform lifecycle, vendor and partner coordination, policy governance, and KPI reporting. The DLP Platform Owner & Policy Lead works closely with cross-functional stakeholders-including compliance, legal, business units, and the Security Operations Centre (SOC)-to uphold and continuously improve data security standards.

What you'll do

• Own and lead the Data Loss Prevention (DLP) platform strategy and lifecycle, managing Microsoft Purview and Zscaler environments to ensure security, performance, and operational excellence.
• Drive DLP governance and policy management, developing, reviewing, and enhancing policies to align with regulatory requirements, business objectives, and evolving cyber risks.
• Act as the technical lead and key stakeholder for DLP platforms, coordinating with vendors, third-party partners, auditors, and internal teams to deliver new capabilities and platform improvements.
• Provide leadership for DLP operations and incident management, serving as the escalation point for complex incidents and ensuring effective response, investigation, and continuous improvement.
• Manage and mentor DLP resources, providing oversight, guidance, and support to DLP Analysts and Engineers to ensure effective policy enforcement and platform administration.
• Deliver executive reporting and performance insights, defining KPIs, producing management reports, and presenting recommendations that strengthen data protection and reduce organisational risk.

What you'll bring

• Proven experience managing enterprise DLP platforms, particularly Microsoft Purview and Zscaler, with strong expertise in policy governance, platform administration, and data protection controls.
• Strong knowledge of data security, compliance, and regulatory requirements, with the ability to translate business and legal requirements into effective DLP policies and controls.
• Experience working with vendors, technology partners, and managed service providers, driving platform enhancements, integrations, and successful service delivery.
• Demonstrated incident management expertise, including collaboration with Security Operations teams to investigate, elevate, and resolve data security incidents.
• Excellent stakeholder management and communication skills, with the ability to influence technical and non-technical audiences and build strong cross-functional relationships.
• Strong analytical, reporting, and documentation abilities, capable of producing meaningful KPI reporting and presenting actionable insights to senior leadership.