Expert/Analyst - Data Loss Prevention - Investment bank

Job Responsibilities : 

Data Protection depends on a combination of people, processes, and technology as its strategic control foundation.

The Data Protection Specialist reports to the APAC Data Protection Controls Manager and has strong technical expertise on DLP tools and platforms.

The role focuses on the design and implementation of enhanced controls to protect the Bank's data and reduce exposure to fraud. Direct responsibilities of the Data Protection Specialist

- Liaise with Requirement Gathering team to understand new business and regulatory requirements for deployment of controls

- Design, perform internal testing, and coordinate deployment of data protection policies

- Obtain all necessary approvals prior to production roll-outs

- Maintain a clean control repository and perform regular reconciliations with actual production platform

- Work closely with Production Security off shore team and provide them guidance on application support

- Maintain Risk Acceptance for exclusions ('business DLP exceptions') on all channels Contributions of the Data Protection Specialist

- Assist in deployment and support of data classification solution - Contribute to the roll-out of new DLP capabilities (source feeds, scanning)

- Contribute to setting up a validation workflow for approved Data Protection business practices.

- Assist in maintaining synchronization on DLP initiatives with DLP project teams in other regions

- Contribute to business engagement and communication on new control capabilities in order to promote them as services to the organization

- Maintain compliance with our operational permanent control framework in all activities Technical and Behavioral Competencies Essential skills

- Hands-on experience with DLP products (detection and blocking capabilities)

- Experience with data classification products - Good understanding of general IT including network security architecture, encryption, and operating systems - Knowledge of SIEM and Event Correlation

- Use of message transfer agents - MTAs) and Web Proxies Useful skills

- Understanding of firewalls, Network IDS's and Host Intrusion Detection solutions

- Unix / Linux and Python scripting experience Behavioral competencies - Excellent interpersonal and communication skills

Min 4 years of relevant experience in the following areas: - Technology, tools, policies, and standards related to DLP security systems and incident response

- Handling of security threats and vulnerabilities

- Electronic investigation, forensic tools and methodologies, including log correlation and analysis, forensically handling electronic data, and computer security investigative processes

- Legal and regulatory aspects surrounding electronic discovery and analysis

- System administration on Windows and Unix platforms Qualifications

- Bachelors or Master's Degree in Computer Science, Information Systems, Engineering or a related field

Certifications - CISSP, CISM or CISA preferred