1. Job overview The Data Loss Prevention (DLP) & IT Security Analyst will be responsible for monitoring, managing and investigating data protection incidents, implementing DLP policies and ensuring organizational data security across endpoint devices, email systems, network infrastructure and cloud environments.

The candidate should have hands-on experience with enterprise DLP solutions, information protection technologies, security incident response and policy management. The role involves working closely with IT Security, SOC, Infrastructure, Compliance and business stakeholders to prevent unauthorized data access, leakage and exfiltration.

2. Key responsibilities

A. DLP Monitoring & Incident Response

- Monitor DLP alerts, events and security incidents across enterprise environments.
- Investigate data leakage, unauthorized data transfers and potential data exfiltration activities.
- Analyze incidents involving email, USB devices, endpoint systems, web uploads and cloud applications.
- Perform root cause analysis (RCA) and recommend corrective and preventive actions.
- Manage incident escalation, remediation and closure within defined SLAs.
- Identify false positives and fine-tune DLP alerts.

B. DLP Policy Management
- Configure, implement and maintain DLP policies based on organizational security requirements.
- Manage policies related to sensitive data, confidential information, PII, PCI and business-critical information.
- Perform policy tuning, testing and enforcement.
- Monitor policy violations and ensure appropriate remediation.
- Support DLP rule creation, exception handling and policy lifecycle management.

C. DLP Tools & Information Protection Technologies
- Administer and monitor enterprise DLP platforms.
- Manage endpoint, network, email and cloud-based DLP controls.




- Implement data classification, labeling and information protection controls.
- Work with encryption, access controls and data protection technologies.
- Support integration of DLP platforms with SIEM and security monitoring solutions.

D. IT Security Operations
- Monitor security events and investigate potential threats.
- Coordinate with SOC teams for security incident management.
- Analyze security logs and identify suspicious user activities.
- Support endpoint security, access control and information security governance.
- Prepare security dashboards, incident reports and compliance documentation.

E. Stakeholder Engagement & Compliance
- Collaborate with IT, HR, Legal, Compliance, SOC and business teams.
- Support information security audits and regulatory compliance requirements.
- Ensure adherence to GDPR, ISO 27001, PCI DSS and internal security policies.
- Conduct security awareness and data protection initiatives.

3. Key technical skill set

Skill category

Mandatory / relevant skills

DLP Fundamentals

Data Loss Prevention, Data Leakage Prevention, Data Exfiltration

DLP Monitoring

DLP Alert Monitoring, Incident Investigation, Incident Response, RCA

DLP Policy Management

Policy Creation, Configuration, Policy Tuning, Policy Enforcement

Endpoint DLP

USB Control, Device Control, Endpoint Monitoring, Application Control

Email DLP

Email Security, Email Encryption,



Email Gateway Monitoring

Network DLP

Network Traffic Monitoring, Web Upload Monitoring, Data Transfer Controls

Cloud DLP

Cloud Data Protection, CASB, SaaS Security

Data Protection

Data Classification, Data Discovery, PII, PCI, PHI

Security Operations

SOC Operations, SIEM Monitoring, Threat Detection, Security Incident Management

Compliance

GDPR, ISO 27001, PCI DSS, Information Security Governance

4. DLP tools and technologies

Candidates should have hands-on experience with at least one or more of the following platforms.

Enterprise DLP solutions

Symantec DLP

Forcepoint DLP

Microsoft Purview DLP

Trellix DLP

Cloud and endpoint security

- Netskope
- Zscaler
- Microsoft Defender for Endpoint
- Microsoft Defender for Cloud Apps
- Digital Guardian

SIEM and security monitoring
- Splunk
- IBM QRadar
- Microsoft Sentinel

Email security
- Proofpoint
- Mimecast
- Microsoft Exchange Online Protection

5. Additional preferred skills

- Experience in banking, financial services or enterprise IT security environments.
- Understanding of data privacy and regulatory requirements.
- Experience with security audits and compliance assessments.
- Knowledge of Active Directory, Azure AD / Microsoft Entra ID.
- Understanding of Windows, Linux and enterprise endpoint environments.
- Knowledge of incident ticketing tools such as ServiceNow and Jira.
- Experience preparing security dashboards, management reports and audit evidence.

6. Candidate profile requirements

Parameter

Requirement

Experience

6 + Years

Core expertise

DLP Monitoring, Incident Response, Policy Management

Tools

Microsoft Purview / Symantec / Forcepoint / Trellix

Domain

Banking & BFSI

📌 Data Loss Prevention (DLP) & IT Security Analyst (Hyderabad)
🏢 CGT Solutions
📍 Hyderabad