DigiTribe - DLP Analyst

Digitribe is looking for a DLP Analyst to join a newly formed Data Loss Prevention team at one of our clients. You'll be the second line of defence in confirming whether a real data leak has occurred, and a key link between incident response and DLP policy tuning.

The team

You'll join a growing DLP function. Two Microsoft Purview specialists design and maintain the DLP rules. An L1 team handles first-line alert triage. As Data SOC L2, you'll take over where L1 escalates.

Your role

• Investigate escalated DLP alerts and determine whether actual data leakage occurred
• Assess the sensitivity and business impact of the data involved
• Coordinate remediation with the relevant stakeholders when an incident is confirmed
• Identify false positives and recurring patterns, and feed tuning needs back to the Purview team
• Help shape the processes and playbooks of a DLP team that is still being built

• Experience as a SOC L2, DLP Analyst or in a similar data protection role
• Solid knowledge of Microsoft Purview DLP (policies, alerts, activity explorer, sensitivity labels)
• Strong incident handling and investigation skills
• Sound judgement on data classification and sensitivity
• Exposure to insider risk management is a plus
• Clear communicator, comfortable working with security, IT and business teams