全职 DLP Technical Specialist 工作, 薪水, Thakral One 公司招聘中 - Ricebowl

As a DLP Technical Specialist, you will enhance the effectiveness and maturity of the APAC Data Loss Prevention (DLP) control environment. Acting as the functional bridge between information‑risk requirements and technical implementation, you will translate complex protection requirements into practical, risk‑based and effective DLP controls.

What You’ll Do and How You’ll Succeed

High Value Asset Governance & Identification

• Engage business and control functions to identify and inventory potential HVAs such as audit reports, regulatory inspection materials, infrastructure diagrams, security documentation, source code, and other sensitive information.
• Analyse existing HVA submissions and rationalise overly broad or granular classifications.
• Develop consistent criteria for identifying and categorising HVAs suitable for DLP monitoring across APAC offices.
• Translate HVAs into technically implementable detection methodologies (keywords, dictionaries, sensitivity labels, classifiers).
• Assess false‑positive and false‑negative implications before implementation and support controlled testing and tuning.
• Establish traceability from identified information risk or HVA through to DLP detection logic, control response, and monitoring.

DLP Business & Technical Analysis

• Act as the bridge between business/risk requirements and technical implementation.
• Understand Microsoft Purview DLP concepts including policies, rules, conditions, exceptions, Sensitive Information Types, sensitivity labels, and policy tips.
• Analyse DLP alerts and rule performance to identify areas for tuning and enhancement.
• Understand information flows across email, endpoints, and other relevant transmission channels.
• Facilitate discussions between business stakeholders and technical engineers where requirements cannot be implemented directly.
• Challenge impractical or overly broad requirements that may cause business disruption.
• Assist in determining appropriate control responses such as monitoring, user warning, justification, blocking, or escalation.
• Document business and functional requirements for translation into technical configuration.

Overall DLP Governance & Project Management

• Support strategic DLP transformation initiatives, including enabling smooth implementation of Phase 3 Microsoft Purview DLP for in‑scope countries.
• Maintain clear project documentation and audit trails.
• Coordinate working groups and stakeholder meetings to drive follow‑up actions.
• Prepare project status reporting and management updates.

We’d Love to Hear From You If...

Experience

• You have 5–8 years of relevant experience in DLP, information protection, information security, data protection, technology risk, or a related discipline.
• You have strong functional experience with Microsoft Purview DLP, including policy design, requirements, testing, tuning, and effectiveness assessment.
• You have knowledge of DLP coverage across email, endpoint, web, and other channels.
• You have experience handling HVAs, supporting data‑classification programmes, and designing/tuning/testing DLP policies, SITs, classifiers, labels, or document‑fingerprinting approaches.

Technical Expertise

• You have strong analytical skills and the ability to translate information‑risk requirements into technical solutions.
• You have stakeholder management, presentation, and communication skills.

Ways of Working

• You collaborate effectively with business stakeholders, control functions, and technical engineers.
• You communicate clearly and document thoroughly.
• You proactively challenge impractical requirements and propose risk‑based alternatives.
• You balance governance compliance with business usability.