Cloud Data Loss Prevention - DLP - Architect

Job Summary We are seeking a Cloud Data Loss Prevention (DLP) Architect to lead the design and implementation of enterprise data protection strategies across cloud environments. The ideal candidate will architect and manage Cloud DLP and DSPM capabilities, ensuring data security across its lifecycle while aligning with regulatory and business requirements. Key Responsibilities Architect and own end-to-end Cloud DLP and DSPM solutions covering data at rest, in motion, and in use Design scalable solutions for continuous data discovery and classification across SaaS, cloud storage, and data platforms Integrate DSPM insights into DLP policies to enable risk-based enforcement and prioritization Identify and mitigate cloud data risks such as overexposure, excessive permissions, and sensitive data combinations Define and implement data risk scoring models and posture metrics Develop and enforce DLP policies aligned with data classification, compliance, and business risk tolerance Lead transition from monitoring to enforcement models while minimizing business disruption Ensure consistency of DLP policies across cloud, network, and endpoint environments Integrate DLP and DSPM telemetry into security operations and incident response workflows Support investigation and response to data exposure and exfiltration incidents Optimize detection mechanisms and reduce false positives through tuning and automation Provide technical leadership, mentorship, and guidance to engineering and security teams Collaborate with cross-functional teams including Cloud Engineering, IAM, Legal, Privacy, and Compliance Deliver risk-based reporting and insights to leadership and support audit requirements Required Qualifications 7+ years of experience in information security with a focus on cloud and data security 3+ years of experience architecting or leading Cloud DLP and/or DSPM solutions Experience protecting data across SaaS, IaaS, and PaaS environments Strong experience with Cloud DLP platforms such as Microsoft Purview, Palo Alto Enterprise DLP, or Zscaler DLP Knowledge of DSPM technologies including data discovery, classification, and exposure analysis Experience with cloud platforms such as Azure, AWS, or GCP Experience securing SaaS platforms such as Microsoft 365 and cloud storage solutions Experience integrating with IAM, CASB, SSPM, SIEM, and SOAR tools Strong understanding of data classification frameworks and information protection standards Knowledge of regulatory requirements such as GDPR, GLBA, and SOC2 Understanding of Zero Trust and SASE architectures related to data security Strong analytical, communication, and stakeholder management skills