Manager - Data Loss Prevention

About the company

SBI Card is a leading pure-play credit card issuer in India, offering a wide range of credit cards to cater to diverse customer needs. We are constantly innovating to meet the evolving financial needs of our customers, empowering them with digital currency for seamless payment experience and indulge in rewarding benefits. At SBI Card, the motto Make Life Simple inspires every initiative, ensuring that customer convenience is at the forefront of all that we do. We are committed to building an environment where people can thrive and create a better future for everyone.

SBI Card is proud to be an equal opportunity & inclusive employer and welcome employees without any discrimination on the grounds of race, color, gender, religion, creed, disability, sexual orientation, gender identity, marital status, caste etc. SBI Card is committed to fostering an inclusive and diverse workplace where all employees are treated equally with dignity and respect which makes it a promising place to work.

Join us to shape the future of digital payment in India and unlock your full potential.

What's in it for YOU

1. SBI Card truly lives by the work-life balance philosophy. We offer a robust wellness and wellbeing program to support mental and physical health of our employees.
2. Admirable work deserves to be rewarded. We have a well curated bouquet of rewards and recognition program for the employees.
3. Dynamic, Inclusive and Diverse team culture
4. Gender Neutral Policy
5. Inclusive Health Benefits for all - Medical Insurance, Personal Accidental, Group Term Life Insurance and Annual Health Checkup, Dental and OPD benefits
6. Commitment to the overall development of an employee through comprehensive learning & development framework

Role Purpose

The financial, reputational and regulatory impact of having SBIC's critical assets stolen or damaged can be catastrophic. Anyone with trusted access can exploit the vulnerabilities that protect critical assets, causing millions of dollars of damage. This role is specific to manage all identified/known threat vector of information leakage either deliberately or inadvertently

This is a technical & solution oriented expertise role in Data Leakage Prevention control to bring-in product and solution level skills on DLP platform, run & maintain overall platform, assuring deployment across egress points and investigate Data-Leakage-Incidents as & when required.

Role Accountability

1. Manage existing Data Leakage/Loss Prevention Program, refresh update/design change, policy configuring & data leakage investigations.
2. Work with DLP Program/ Product vendors to update/he DLP tools, technology, and processes. Including identification, assessment of tools, technology, partners/ vendors
3. Understand and follow the incident response process through event escalations, ensure DLP alerts are investigated, responded, and actioned on time.
4. Collaborate with internal control and support teams such as Compliance, HR, business functions.
5. Participating as an individual contributor on a team in the deployment of a Data Classification, Data Discovery, Data Marking, and DLP solution
6. Assist with the development and testing of proposed DLP solutions. Interface with system owners to coordinate new endpoint deployments.
7. G-Work with cross-functional teams to integrate DLP systems with other solutions like SIEM, NAC and Vulnerability Management
8. H-Perform operations and maintenance tasks such as patching and upgrades on all DLP system components. Respond to troubleshooting tickets associated with DLP and Data masking, Information Rights management solution.
9. Manage e-discovery program for Data-at-rest, PII Discovery Scan for PCI-DSS and Data Privacy requirement and Information Rights Management

Measures of Success

1. Uptime of DLP Platform,implementation, upgrade and life-cycle management
2. Development and maturity of DLP Policies & False Positives under acceptable threshold
3. Delivery of project plans, milestone updates, presentations, assessment reports and communications to senior management and other relevant stakeholders.
4. KPI/KRI is as per defined threshold

Technical Skills / Experience / Certifications

1. Clear understanding & Hands-on experience on Data Leakage Prevention Platform including Infra & Content Management & Leakage Threat Vector
2. Good understanding of DLP solutions, preferably from Symantec / Broadcom, Data Classification, IRM etc.
3. Experienced with deployment, maintenance, and operations of one or more DLP solutions on endpoint, web, and email.
4. Good analytical, troubleshooting, and problem-solving skills
5. Ability to present information to management & stakeholders (Internal & external)
6. Good verbal and written communication skills
7. Ability & willingness to work in 24.7 operations/support as required by organization.
8. Bachelor's Degree or advanced course in Computer Science or Information Security related areas
9. DLP Product OEM Certification on related technology
10. Prior experience in DLP solution management & understanding of Data-in-use, Data-in-motion & Data-at-rest.

Competencies critical to the role

1. Demonstrate skills to achieve stated objectives.
2. Demonstrate communication skills to address different audiences.
3. Demonstrate self-starter with ability to gain required knowledge in dynamic environments and remain up to date on cutting-edge technologies.
4. Demonstrate teamwork & collaboration.
5. Demonstrate analytical, troubleshooting, and problem-solving skills.

Qualification

Bachelor's Degree or advanced course in Computer Science or Information Security related areas

Preferred Industry

BFSI / NBFC /E-commerce/IT & ITES / Telecom