Insider Threat Engineering Lead DLP

Job Title- Insider Threat Engineering Lead (DLP)

Job Type- Remote

Duration- 6 months (Possible Extension)

Salary- £750 per day

Onsite Parking

Onsite Parking, Holidays are accrued for PAYE contractors and will 28 days to start off with which increases to 33 days after 12 weeks.

About Us

Our client is a leading global advisory, broking and solutions company that helps clients around the world turn risk into a path for growth. With roots dating to 1828, and has 39,000 employees in more than 120 territories. They design and deliver solutions that manage risk, optimize benefits, cultivate talent, and expand the power of capital to protect and strengthen institutions and individuals. Their unique perspective allows us to see the critical intersections between talent, assets and ideas - the dynamic formula that drives business performance

Job Description

We are seeking passionate people to grow the Cyber Security team within WTW and provide an excellent service and trusted expertise to all parts of our business. We have an exciting opening for a highly skilled and experienced Insider Threat Engineering Lead.

As part of the Cyber Defence department, this role will manage the Insider Threat engineering team aligned to Data Loss Prevention (DLP) and will manage a geographically and culturally diverse team of engineers to ensure the effective operation of our DLP platform. Reporting to the Global Head of Insider Threat, the L3 Insider Threat Engineering Lead - DLP role is critical to the success of the DLP capability within WTW.

This role would suit those with an extensive history in building and managing Engineering teams, and with significant technical experience of the Microsoft Security stack with a focus on Purview DLP, but also Insider Risk Management (IRM) and Defender.

As the L3 Insider Threat Engineering Lead - DLP, the primary responsibilities will be:

• Accountability for the technical management and administration of the DLP platform.
• Lead and manage the Insider Threat Engineering team aligned to DLP - a geographically and culturally diverse team of engineers, providing guidance, coaching and support to ensure the successful execution of their responsibilities, and the effective operation of our Insider Threat program.
• Work closely with the L1 Insider Threat Manager, the L3 Insider Threat Engineering Lead - IRM, and Global Head of Insider Threat to develop, implement and refine strategies, rules, policies, and procedures to help prevent data loss and protect sensitive information across the organisation.
• Produce a technical roadmap that is aligned to the overall Cyber Security strategy.
• Ensure that DLP policies are fine-tuned and matured to reduce the number of false positives.
• Collaborate with cross-functional teams, including IT, Cyber Security, HR, legal, and compliance, to define and enforce data protection and insider risk requirements, policies and standards.
• Conduct regular assessments of the Insider Threat Engineering - DLP function to identify areas for continuous improvement.
• Provide regular reports and updates to senior management on the performance and effectiveness of the Insider Threat Engineering team.
• Identify trends and drive requirements aimed at improving and enhancing existing DLP policies, and report this upward through the security management chain.

Secondary responsibilities

• Be an integral part of projects that enhance insider threat and data protection policies and standards.
• Other relevant tasks as designated by the Global Head of Insider Threat.

Qualifications

What you will need:

• It is essential that you have in-depth experience managing Insider Threat and DLP engineering teams in a global enterprise organisation.
• A solid engineering knowledge of the Microsoft Security stack, in particular Purview DLP, but also IRM and Defender.
• Relevant Microsoft qualifications in Purview DLP, IRM and Defender.
• In-depth understanding of data protection laws, regulations, and compliance requirements (e.g., GDPR, CCPA, HIPAA).
• Strong analytical problem-solving skills.
• Excellent communication, leadership, and interpersonal skills, with the ability to effectively collaborate and influence stakeholders at all levels of the organization.
• Must be self-motivated and capable of independent work.

Beneficial:

• Previous experience with audits such as SOC2.
• Previous experience of deploying or managing the Microsoft IRM module within a global enterprise organisation.
• Industry certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Lead (CISM), or Certified Information Privacy Professional (CIPP)

Experience with CASB and UEBA