DLP Policy Specialist

We are seeking a candidate to join the Data Protection Services team as an Associate supporting Data Loss Prevention (DLP) inspection capability development and governance. In this role, you will contribute to the design, implementation, and ongoing support of DLP inspection controls across emerging and non - standard data transfer channels, helping ensure alignment with firm policy, risk expectations, and technology standards.

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Cybersecurity Operations role at Associate level, which is part of the job family responsible for monitoring, detecting, and responding to security incidents to ensure the organization's systems and data are protected from actual and potential threats or breaches

• Support the design and implementation of new DLP inspection capabilities across data transfer paths not currently covered by existing services.

• Contribute to service definition, requirement gathering, and documentation to ensure alignment with firm standards.

• Assist with expanding DLP inspection coverage across file transfer and cloud-based channels to reduce the risk of sensitive data exposure.

• Participate in the evaluation of technologies and solutions to support new and evolving inspection requirements.

• Contribute to DLP controls related to interactions with external AI and web-based services, including helping define requirements and inspection approaches.

• Support the development of inspection rules and control logic to mitigate data leakage risks.

• Coordinate with engineering, risk, and policy stakeholders to support implementation and ensure alignment with governance expectations.

• Support ongoing governance activities, including requirement intake, documentation, and audit readiness, ensuring controls are implemented in a consistent and auditable manner.

• At least 4 years' relevant experience would generally be expected in cybersecurity, data protection, or DLP-related roles, with practical exposure to control implementation or operational support.

• Solid understanding of data loss risks across common channels such as file transfer, cloud applications, and web-based services.

• Experience supporting technology initiatives, including involvement in requirements gathering, solution design, or implementation activities.

• Ability to interpret technical and business requirements and contribute meaningfully to solution discussions.

• Strong organizational and documentation skills, with experience supporting governance, audit, or control-related processes.

• Demonstrated ability to collaborate effectively with technology, risk, and business stakeholders.

• Working knowledge of control lifecycle processes, including change management and operational support practices.

• Ability to analyse information, identify risks or gaps, and contribute to continuous improvement of controls and processes.