Role Overview
We are seeking a highly skilled DLP Lead to drive the configuration, optimization, and operational management of Forcepoint DLP and Everfox Endpoint DLP platforms. The ideal candidate will act as the subject matter expert (SME), lead incident handling, manage a team of DLP analysts, and ensure global consistency in Data Loss Prevention practices. This role combines deep technical expertise with leadership, regulatory alignment, and cross-functional collaboration.
Key Responsibilities
- Lead configuration, policy tuning, and operational support for Forcepoint and Everfox Endpoint DLP platforms.
- Act as SME for Forcepoint DLP and Everfox, resolving deployment, upgrade, and integration issues.
- Drive DLP event triage, analysis, and incident response to ensure timely and consistent execution.
- Monitor operational KPIs and deliver actionable insights to improve response times and detection accuracy.
- Act as primary escalation point for critical DLP incidents.
- Conduct root cause analysis and implement corrective/preventive measures.
- Mentor and manage a team of DLP analysts.
- Partner with Security Engineering, SOC, GRC, and regional teams to align strategy and execution.
- Develop automation scripts (Python, PowerShell, Bash) to enhance workflows, reduce false positives, and improve detection.
- Ensure policies meet compliance standards (GDPR, HIPAA, FFIEC, CCPA, NIST).
- Continuously assess and enhance DLP control effectiveness.
- Deliver executive-level dashboards, reports, and presentations to senior stakeholders.
- Translate complex operational data into business-relevant insights.
Qualifications
- 5–8 years of hands-on experience with Forcepoint DLP (endpoint & network) and Everfox Endpoint DLP.
- Strong troubleshooting skills in policy enforcement, deployment failures, and client-agent stability.
- Proven scripting experience in Python, PowerShell, or Bash.
- Solid understanding of endpoint and network security architectures.
- Knowledge of data protection regulations (GDPR, HIPAA, etc.) with experience implementing compliant DLP policies.
- Experience in managing or mentoring DLP analysts or incident responders.
- Excellent interpersonal, communication, and presentation skills.
Preferred Skills
- Experience leading global DLP programs.
- Familiarity with cloud-based DLP (Microsoft 365 DLP, CASB integrations).
- Proficiency in metrics & KPI reporting tools (Power BI, Tableau).
- Understanding of SIEM/SOAR integrations with DLP tools.
Certifications (Preferred)
- Forcepoint DLP Certified Professional
- Everfox certification/training (if available)
- CISSP, CISM, or equivalent industry certifications
Competencies
- Microsoft DLP
- IBM QRadar SIEM
- Data Protection Regulations & Compliance
- Automation (Python/PowerShell/Bash)