DLP Policy & Controls Specialist
- Montreal, QC, Canada
Contract
Applications open in a new tab.
Job details
- Job type
- Contract
- Apply by
- Experience
- Minimum 5+ years of relevant experience in DLP, cybersecurity, data protection, information security, or technology risk.
- Posting language
- English
- Posted
Original job description
Role Overview
We are seeking an experienced **Data Loss Prevention (DLP) Policy & Controls Specialist** to support the design, implementation, tuning, and ongoing management of enterprise DLP policies and controls.
The role will focus on translating security, regulatory, and control requirements into practical and deployable DLP policies across email, endpoint, web, cloud/SaaS, and GenAI environments.
The candidate will work closely with engineering, operations, risk, compliance, and audit teams to ensure controls are effective, supportable, and aligned with enterprise governance standards.
Key Responsibilities
Design, develop, and maintain DLP policies across email, endpoint, web, cloud/SaaS, and GenAI environments.
Manage the DLP policy lifecycle, including policy creation, testing, tuning, implementation support, documentation, and optimization.
Translate security, risk, regulatory, and control requirements into deployable DLP policies and controls.
Tune DLP policies to improve detection accuracy and reduce false positives and false negatives.
Apply sensitive data classification and detection methods to strengthen DLP control effectiveness.
Incorporate jurisdiction-specific requirements, including data residency and regulatory constraints such as China Onshore requirements.
Partner with engineering and operations teams to ensure DLP controls are technically feasible and operationally supportable.
Assess and document DLP control coverage, gaps, limitations, exceptions, and compensating controls.
Support risk, compliance, and audit inquiries related to DLP control design and effectiveness.
Analyze technical, operational, and regulatory information and communicate findings clearly to technology and business stakeholders.
Support DLP metrics, reporting, and control-effectiveness monitoring.
Required Skills & Experience
Minimum 5+ years of relevant experience in DLP, cybersecurity, data protection, information security, or technology risk.
Strong hands-on experience with DLP policy creation and lifecycle management.
Strong understanding of DLP detection and enforcement controls.
Experience with DLP policy tuning, including reducing false positives and false negatives.
Experience translating security and control requirements into deployable DLP policies.
Strong understanding of sensitive data classification and detection methods.
Experience supporting risk and audit inquiries, including control coverage, gaps, limitations, and compensating controls.
Experience addressing jurisdiction-specific regulatory and data residency requirements.
Strong documentation, analytical, and stakeholder communication skills.
Ability to collaborate effectively with engineering and operations teams to develop practical and supportable controls.
Good-to-Have Skills
Experience with GenAI DLP / AI data protection
Knowledge of DSPM, data classification, and sensitivity labeling
Familiarity with GDPR, CCPA/CPRA, PCI DSS, and financial-services regulatory requirements
Experience with DLP incident and alert analysis
Experience developing DLP metrics, reporting, and control-effectiveness dashboards
General understanding of cloud security, SaaS security, and cloud data protection
More about this job
Responsibilities
Design, implement, tune, document, and optimize DLP policies across email, endpoint, web, cloud/SaaS, and GenAI environments, translating security and regulatory requirements into practical controls. Assess control coverage and effectiveness, address jurisdiction-specific requirements, support risk and audit inquiries, and collaborate with engineering, operations, compliance, and business stakeholders.
Requirements
Requires at least five years of relevant experience and hands-on expertise in DLP policy creation, lifecycle management, detection and enforcement, and tuning to reduce false positives and false negatives. Candidates should understand sensitive data classification, regulatory and data residency requirements, control assessment, and stakeholder communication; experience with GenAI DLP, DSPM, and relevant regulations is an advantage.
Skills
- DLP Policy Creation
- DLP Lifecycle Management
- DLP Policy Tuning
- Data Loss Prevention
- Sensitive Data Classification
- Data Detection and Enforcement
- Regulatory Compliance
- Data Residency Requirements
- Risk and Audit Support
- Control Effectiveness Monitoring
- GenAI Data Protection
- DSPM
- Cloud and SaaS Security
- Incident and Alert Analysis
- Documentation
- Stakeholder Communication
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Consulting
Keywords
- Data Loss Prevention
- DLP Policies
- Policy Lifecycle Management
- Policy Tuning
- Email Security
- Endpoint Security
- Web Security
- Cloud Security
- SaaS Security
- GenAI Data Protection
- Sensitive Data Classification
- Data Detection
- Detection and Enforcement Controls
- Data Residency
- China Onshore Requirements
- GDPR
- CCPA/CPRA
- PCI DSS
- DSPM
- Sensitivity Labeling
- DLP Incident Analysis
- Alert Analysis
- Risk Management
- Audit Support
- Control Effectiveness
- Compensating Controls
- Metrics and Reporting
- False Positive Reduction
- False Negative Reduction
- Technology Risk