Tech Lead (Cyber Security DLP)
Description
At Aristocrat, we are committed to bringing happiness to life through the power of play. As a company that thrives on innovation and excellence, we invite you to join our team as a Tech Lead (Cyber Security DLP). This is an outstanding opportunity to play a pivotal role in protecting our diverse and dynamic environment. If you are passionate about cybersecurity and eager to lead world-class data protection initiatives, this role is perfect for you!
Responsibilities
- Build, deploy, and maintain enterprise Data Loss Prevention (DLP) solutions, primarily using Microsoft Purview.
- Architect, deploy, and tune DLP solutions across various channels including Endpoint, Network, Email, communication tools, and Cloud.
- Manage data discovery tools for both structured and unstructured data environments on-premises and in the cloud.
- Deploy and manage cloud-native data protection controls such as Defender for Cloud Apps, CASB, and CSPM.
- Analyze DLP incidents, perform root cause analysis, and improve rules to reduce false positives.
- Manage data encryption solutions for data at rest, in transit, and in use.
- Implement data labelling, auto labelling, and manage sensitive information types (SITs) and custom SITs.
- Configure DLP policies, IRM policies, rules, incident workflows, and response automation.
- Collaborate with SOC and IR teams to respond to data-related security events.
- Minimize false positives by refining regex patterns, exact data matching (EDM), and indexed document matching (IDM).
- Develop dashboards, reports, and analytics for monitoring data movement.
- Ensure compliance with GDPR, HIPAA, PCI DSS, DPDP Act (India), ISO 27001, and internal policies.
- Build documentation including SOPs, runbooks, architectural diagrams, and policy standards.
- Coordinate enterprise encryption standards for laptops, servers, and databases.
- Manage Key Management Systems (KMS) or Hardware Security Modules (HSM) or equivalent experience and Public Key Infrastructure (PKI) lifecycles.
Requirements
- 6+ years of experience in cybersecurity with a focus on data protection/DLP.
- Deep expertise in enterprise DLP tools such as Microsoft Purview/DLP, Symantec/Broadcom, Forcepoint, and Zscaler.
- Hands-on experience with CASB solutions and data classification tools like Microsoft Information Protection (MIP) and Varonis.
- Strong understanding of encryption algorithms (AES, RSA), tokenization, data masking, and hashing.
- Proficiency in Python, PowerShell, or SQL for automation and reporting.
- Ability to explain complex data risks to non-technical collaborators, including legal and HR teams.
- Preferred certifications include CEH, CISSP, CISM, CDPSE, or vendor-specific DLP certifications.
- Experience with AI and machine learning behavioral analytics to detect unusual data exfiltration (UEBA).
- Familiarity with forensic artifacts and evidence handling to support the IR team.
Benefits
- Robust benefits package
- Global career opportunities
