DLP & Data Classification Engineer

Role OverviewWe are seeking an experienced DLP & Data Classification Engineer to join a leading banking client in Riyadh on a 3-month on-site contract.The role is responsible for implementing, administering, and supporting Data Loss Prevention (DLP) and Data Classification solutions to protect sensitive, confidential, and regulated information across the organization.The successful candidate will work closely with Cybersecurity, Data Governance, Risk, Compliance, IT, and business teams to identify sensitive data, establish appropriate classification policies, and implement DLP controls to prevent unauthorized access, transfer, sharing, or leakage of sensitive information.Key ResponsibilitiesDLP Engineering & Implementation✔ Design, implement, configure, and maintain enterprise DLP solutions.✔ Develop and manage DLP policies across endpoints, email, web, network, and cloud environments.✔ Configure detection rules, policies, exceptions, enforcement actions, and incident workflows.✔ Monitor and investigate DLP incidents and potential data leakage activities.✔ Perform root-cause analysis and remediation of DLP incidents.✔ Fine-tune DLP policies and detection rules to improve detection accuracy and reduce false positives.✔ Manage DLP agents, policies, upgrades, health monitoring, and troubleshooting.✔ Support DLP implementation, migration, upgrade, and optimization activities.✔ Integrate DLP platforms with SIEM, SOC, endpoint security, email security, IAM, and other security technologies.Data Classification✔ Implement and maintain enterprise Data Classification policies and controls.✔ Identify and classify sensitive, confidential, restricted, and regulated information.✔ Define classification levels and corresponding protection requirements based on business and regulatory requirements.✔ Configure classification rules for structured and unstructured data.✔ Develop classification rules for PII, customer information, financial data, payment information, credentials, and confidential business information.✔ Implement classification policies across endpoints, email, documents, file repositories, cloud platforms, and other data sources.✔ Align DLP policies with data classification labels and sensitivity levels.✔ Support automated and manual data classification activities.✔ Continuously review and improve classification rules based on business requirements and security incidents.Data Protection & Insider Threat✔ Implement controls to prevent unauthorized transmission, copying, sharing, or extraction of sensitive information.✔ Monitor activities involving removable media, email attachments, web uploads, cloud storage, printing, clipboard, and other data transfer channels.✔ Investigate potential insider threat and data leakage incidents.✔ Support security investigations involving unauthorized access or movement of classified data.✔ Define appropriate DLP enforcement actions based on data sensitivity and business requirements.Compliance & Regulatory Requirements✔ Ensure DLP and Data Classification controls align with applicable regulatory requirements.✔ Good understanding of SAMA Cybersecurity Framework, ISO 27001, GDPR, and data privacy principles.✔ Support audits and compliance assessments by providing relevant DLP and Data Classification evidence and documentation.Technical Requirements✔ Minimum 3 years of hands-on experience in DLP engineering, Data Classification, implementation, administration, or support.✔ Strong hands-on experience with one or more enterprise DLP platforms, including:- Forcepoint DLP- Symantec / Broadcom DLP- Microsoft Purview DLP- Trellix DLP- Digital Guardian- Other equivalent enterprise DLP solutions✔ Strong understanding of DLP, Data Classification, Data Discovery, Data Protection, Information Security, Insider Threat Management, and Data Privacy.✔ Experience with DLP policy creation, classification policies, data discovery, sensitive data identification, endpoint/email/network DLP, incident investigation, policy tuning, and reporting.✔ Experience integrating DLP solutions with SIEM/SOC platforms is highly desirable.Project Experience✔ Proven experience delivering DLP and/or Data Classification implementation projects.✔ Experience with migration, upgrade, optimization, or deployment of enterprise DLP solutions.✔ Ability to work effectively in project-based environments with tight deadlines.✔ Strong technical documentation and reporting skills.Banking ExperienceExperience within banking, financial services, insurance, or other highly regulated environments is strongly preferred.Education & CertificationsBachelor’s degree in Computer Science, Cybersecurity, Information Technology, Information Security, or a related field is preferred.Relevant certifications in DLP, Data Protection, Cybersecurity, Data Privacy, or Information Security are an advantage.Soft Skills✔ Strong analytical and problem-solving skills.✔ Strong communication skills with technical and non-technical stakeholders.✔ Ability to work independently and as part of a multidisciplinary team.✔ Strong attention to detail.✔ Ability to work under pressure and meet tight project deadlines.✔ Strong stakeholder management and collaboration skills.Candidate ProfileThe ideal candidate should have:✔ 3+ years of DLP / Data Classification experience✔ Strong hands-on experience with Forcepoint, Symantec/Broadcom, Microsoft Purview, or equivalent DLP technologies✔ Practical experience in Data Classification and Data Discovery✔ Strong understanding of data protection and insider threat controls✔ Experience in banking or regulated environments✔ Knowledge of SAMA, ISO 27001, and data protection requirements✔ Experience delivering DLP implementation or transformation projects✔ Strong troubleshooting, incident investigation, and policy-tuning capabilities✔ Immediate or short-notice availability is highly preferred due to the short contract duration.✔ Willingness to work on-site in RiyadhContract DetailsJob Title: DLP & Data Classification EngineerLocation: Riyadh, Saudi Arabia 🇸🇦Duration: 3 MonthsWork Model: On-SiteIndustry: Banking / Financial ServicesExperience: 3+ YearsEmployment Type: Contract