Job Type:
Permanent
Build a brilliant future with Hiscox
Role Overview
The Data Loss Prevention (DLP) Team Lead will establish and lead a newly created DLP function, taking ownership of the organisation's approach to data protection across network, endpoint, cloud, and email environments.
This function is being created by a DLP project which is enhancing technologies and processes.
As the first dedicated hire in this space, the role will contribute to the DLP strategy, shape policy frameworks, and optimise the use of existing technologies including Zscaler DLP, Microsoft Purview, and Mimecast.
The role will act as the primary Subject Matter Expert (SME), oversee DLP alert operations, and build a small team of DLP Analysts to support day-to-day activities.
Key Responsibilities
DLP Strategy & Capability Development
- Establish and mature the organisation's DLP capability across web, email, AI, and cloud platforms
- Define the operating model, processes, and standards for DLP across Zscaler, Microsoft Purview, and Mimecast
- Assess current configurations and recommend enhancements to improve data protection coverage and effectiveness
- Develop a forward-looking roadmap for DLP capabilities, including integration across platforms and alignment with broader security strategy
- Identify gaps between tooling capabilities and business requirements, and propose solutions
Policy & Control Design
- Design, implement, and continuously refine DLP policies across: Zscaler DLP (web and cloud traffic controls) Microsoft Purview (M365, endpoint, and data classification) Mimecast (email security and data protection policies)
- Collaborate closely with Privacy, Legal, and Security teams to ensure policies align with GDPR and other regulatory requirements
- Translate data classification standards into enforceable DLP detection rules across all platforms
- Optimise policies to balance risk reduction with user experience (reducing false positives and alert fatigue)
- Manage sanctioning of apps as appropriate in collaboration with Procurement
- Leverage DSPM tooling to ensure that data used for AI grounding in services is correctly secured
Operational Leadership & Incident Management
- Oversee the monitoring and triage of DLP alerts across all platforms (web, endpoint, email, and cloud)
- Act as the primary escalation point for complex, high-risk, or sensitive data loss incidents
- Define and implement standard operating procedures (SOPs) for alert handling across Zscaler, Purview, and Mimecast
- Ensure consistent incident response, investigation, and documentation practices
- Work with Security Operations and Privacy teams on incident escalation and breach assessment processes
Subject Matter Expertise (SME)
- Serve as the technical and functional SME for: Zscaler DLP policies and traffic controls Microsoft Purview DLP, Information Protection, and Insider Risk capabilities Mimecast data protection and email DLP controls
- Stay current on new features, platform updates, and emerging DLP trends
- Lead configuration reviews, tuning exercises, and platform optimisation initiatives
- Provide guidance and training to internal teams on DLP capabilities and data protection best practices
Team Leadership & Development
- Recruit, onboard, and lead a team of DLP Analysts
- Transition day-to-day alert triage and investigation to the analyst team over time
- Define workflows, responsibilities, and performance expectations
- Provide coaching, mentoring, and ongoing development for team members
- Embed a culture of continuous improvement and operational excellence
Stakeholder Engagement & Reporting
- Partner with Privacy, Legal, IT, and Security Operations teams on DLP-related initiatives
- Provide regular reporting on DLP metrics, including: Alert volumes and trends Incident severity and response times Policy effectiveness and false positive rates
- Communicate risks, insights, and recommendations to senior stakeholders
- Support audits, compliance reviews, and regulatory inquiries related to data protection
Key Skills & Experience
- Strong hands-on experience with enterprise DLP technologies, specifically: Zscaler DLP Microsoft Purview (DLP, Information Protection, Insider Risk) Mimecast (email DLP / content inspection)
- Proven track record of designing and implementing DLP policies across multiple control points (endpoint, network, cloud, and email)
- Strong understanding of data protection regulations (e.g., GDPR) and data classification frameworks
- Experience handling and managing security incidents and escalations
- Ability to tune DLP systems to improve signal-to-noise ratio and operational efficiency
- Experience leading or building teams (or readiness to step into a leadership role)
- Strong communication and stakeholder management skills
Work with amazing people and be part of a unique culture
