Data Loss Prevention Technical Specialist
A regional DLP specialist in the Bank's APAC Corporate Risk Management office, bridging information-risk requirements and technical implementation: identifying High Value Assets, designing and tuning Microsoft Purview DLP policies, SITs and classifiers, analyzing alerts, and supporting the Phase 3 Purview DLP rollout — advisory and oversight, not platform ownership or production configuration.
- Compensation
- SGD 8K–SGD 10K / mo
- Location
- Singapore
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- 5-8 years of relevant experience in DLP, information protection, information security, data protection, technology risk or a closely related discipline
- Strong functional experience with Microsoft Purview DLP, including policy design, requirements, testing, tuning and effectiveness assessment
- Good knowledge of DLP coverage across email, endpoint, web and other channels
- Experience handling HVAs / supporting data-classification programmes, designing, tuning or testing DLP policies, SITs, classifiers, labels or document-fingerprinting approaches
- Strong analytical, stakeholder management, presentation and communication skills
- Proactive working attitude, ability to work cohesively as a team and drive outcomes independently
Full description
Data Loss Prevention Technical SpecialistRisk Management Office for Asia - Corporate Risk Management (CORP)Job Description
We are seeking a technically strong and risk-focused DLP Technical specialist to enhance the effectiveness and maturity of our APAC Data Loss Prevention (DLP) control environment.
In this regional role, you will help extend information protection beyond customer information and Personally Identifiable Information (PII) to the Bank's High Value Assets (HVAs) and other highly confidential information. Acting as the functional bridge between information-risk requirements and technical implementation, you will translate complex protection requirements into practical, risk-based and effective DLP controls. The role does not own the Microsoft Purview platform or perform production configuration. Instead, it provides information-risk expertise, functional control design and specialist oversight to ensure information-protection requirements are translated into effective technical solutions.
You will work closely with business, Risk, Information Security and Technology stakeholders across APAC to strengthen the Bank's information-protection capabilities while supporting strategic DLP transformation initiatives.
Job Responsibilities1. High Value Asset Governance &Identification
- Engage business and control functions to identify and inventory potential HVAs, such as Audit reports, regulatory inspection materials, network infrastructure diagrams, system architecture/security documentation, source code and other highly sensitive information.
- Analyze existing HVA submissions and rationalize overly broad or granular classifications.
- Develop consistent criteria for identifying and categorizing which HVAs are suitable for DLP monitoring across APAC office sand functions.
- Translate HVAs into technically implement able detection methodology, including keywords, dictionaries, sensitivity labels, classifiers or other appropriate detection mechanisms.
- Assess false-positive and false-negative implications before implementation and support controlled testing and tuning.
- Establish traceability from identified information risk or HVA through to DLP detection logic, control response and monitoring.
2. DLP Business & Technical Analysis
- Act as the bridge between business/risk requirements and technical implementation.
- Understand Microsoft Purview DLP concepts including policies, rules, conditions, exceptions, Sensitive Information Types, sensitivity labels and policy tips.
- Analyze DLP alerts and rule performance to identify areas for tuning and enhancement.
- Understand information flows across email, endpoints and other relevant transmission channels.