Team Member - IRM-SUPPORT SERVICES-Information Risk Management Team

Job Title: Cyber Security Specialist - Data Protection
Location: Thane /Goregaon
Job Type: Full-Time

Role Summary

We are seeking a Cyber Security Specialist with expertise in Data Protection technologies and controls within the Information Security team. The role will be responsible for reviewing, challenging, and assessing the effectiveness of enterprise data protection controls across DLP, DRM, CASB, SSE, and SASE environments, ensuring security risks are adequately identified, managed, and mitigated.

The ideal candidate will possess strong knowledge of data protection frameworks, enterprise security architectures, network security, cloud security, and API security fundamentals, with the ability to evaluate complex technology environments and identify control gaps and improvement opportunities.

Key Responsibilities

• Act as the 2LOD subject matter expert for Data Protection, providing independent oversight and challenge of implemented controls.
• Review and assess the effectiveness of DLP controls across endpoint, email, web, cloud, and collaboration platforms.
• Evaluate DLP policy coverage, detection logic, rule tuning, false positive/negative rates, and overall control effectiveness.
• Review and assess DRM and information protection controls. Assess the design and implementation of CASB, SSE, and SASE controls.
• Conduct security assessments of complex business and technology environments to identify data protection risks, control deficiencies, and remediation opportunities.
• Participate in security architecture reviews and provide recommendations for secure design and data protection requirements.
• Develop risk assessments, control review reports, and management recommendations for stakeholders and senior leadership.
• Support audits, regulatory reviews, risk assessments, and compliance initiatives relating to data protection and information security.

Required Skills & Experience

• 8+ years of experience in Information Security, with significant focus on Data Protection and Data Security.
• Strong understanding of new age DLP, DRM, CASB, Proxy, SSE solutions, Enterprise & cloud security architectures, network security concepts and controls, API security.
• Experience reviewing and assessing:
  • DLP policy design and effectiveness
  • Detection methodologies and rule optimization
  • Data classification and discovery controls
  • Insider risk and data exfiltration controls
• Experience conducting security control assessments, architecture reviews, risk assessments, and gap analyses in complex enterprise environments.

Preferred Qualifications

• CISSP, CISM, CCSP, CCSK, or equivalent security certifications & solution certifications
• Experience within BFSI
• Strong stakeholder management, analytical, and report-writing skills.

Ideal Candidate

A data protection professional with strong expertise in DLP, DRM, CASB/SASE/SSE technologies and security control assessments, capable of independently evaluating the effectiveness of security controls, challenging existing implementations, identifying gaps, and providing risk-based recommendations to strengthen the organization's data protection posture.