Job Description

The Data Loss Prevention (DLP) Manager is responsible for leading the organization’s data protection strategy, with a primary focus on preventing unauthorized data exfiltration, leakage, and misuse across endpoints, networks, cloud platforms, and user activities.

This role drives the design, implementation, and continuous improvement of DLP capabilities, ensuring alignment with business objectives, regulatory requirements, and the overall cybersecurity strategy. The DLP Manager collaborates closely with Security Operations, IT, Legal, Compliance, and business units to safeguard sensitive data while enabling business productivity and operational efficiency.

RESPONSIBILITIES

Strategy & Leadership

• Define and execute the enterprise DLP strategy aligned with organizational risk appetite and cybersecurity objectives.
• Establish and maintain a comprehensive data protection roadmap across endpoint, network, email, and cloud environments.
• Lead, mentor, and develop the DLP team, fostering a culture of accountability, ownership, and continuous improvement.

• Partner with senior stakeholders to ensure data protection initiatives align with business priorities and risk management objectives.

  DLP Operations & Engineering

• Oversee the deployment, configuration, and ongoing optimization of DLP technologies (e.g., endpoint DLP, CASB, email DLP).
• Develop and maintain DLP policies, rules, and detection logic for sensitive data, including PII, financial data, and intellectual property.
• Ensure effective data classification, labeling, and lifecycle management across the organization.

• Continuously tune DLP controls to reduce false positives and enhance detection accuracy.

  Monitoring, Incident Response & Investigation

• Establish and manage DLP monitoring processes within the Security Operations Center (SOC).
• Lead investigations into data loss incidents, insider threats, and potential data exfiltration activities.
• Coordinate response actions including containment, remediation, and reporting.

• Collaborate closely with Legal and HR on sensitive insider risk and data misuse cases.

  Governance, Risk & Compliance

• Ensure DLP controls are aligned with regulatory and compliance requirements (e.g., GDPR, HIPAA, ISO 27001).
• Support internal and external audits by providing evidence of data protection controls and processes.
• Develop and enforce enterprise data handling standards, policies, and procedures.

• Conduct risk assessments related to data exposure, leakage, and data handling practices.

  Cross-Functional Collaboration

• Partner with IT and Cloud teams to integrate DLP capabilities into enterprise architecture and platforms.
• Collaborate with Identity & Access Management (IAM) teams to enforce least privilege and secure data access controls.
• Work with business units to balance security controls with operational efficiency and user experience.

• Deliver awareness and training programs to promote data protection best practices across the organization.

  Metrics & Continuous Improvement

• Define, track, and report key performance indicators (KPIs), including:
  • Data exfiltration incidents
  • DLP alert accuracy (false positive and true positive rates)
  • Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR)
• Provide regular reporting and insights to senior leadership on DLP effectiveness and risk posture.

• Drive continuous improvement of DLP capabilities through automation, analytics, and process optimization.

QUALIFICATIONS

Experience

• 7–10+ years of experience in Information Security, with at least 3–5 years focused on DLP, data protection, or insider threat programs.
• Proven experience managing enterprise DLP programs and tools (e.g., Microsoft Purview, Symantec, Forcepoint, Netskope).
• Strong background in Security Operations, incident response, or digital investigations.

Technical Skills

• Deep understanding of data classification, data lifecycle management, and data protection frameworks.
• Hands-on experience with endpoint, network, email, and cloud-based DLP technologies.
• Strong knowledge of cloud security environments (Microsoft 365, AWS, GCP).
• Experience integrating DLP with SIEM and SOAR platforms.
• Familiarity with encryption, rights management, and access control models.
• Willingness to support 24/7 operations or rotational on-call requirements as needed.

Leadership & Soft Skills

• Strong stakeholder management and communication skills, with the ability to translate technical risks into business impact.
• Proven experience leading teams and managing cross-functional initiatives.
• High level of integrity and discretion when handling sensitive data and investigations.
• Ability to operate effectively in a fast-paced, high-pressure environment.

Certifications (Preferred)

• CISSP or CRISC
• GIAC certifications (GCIA, GCED, or GCFA)
• Data privacy certifications (e.g., CIPP, CIPM)

PHYSICAL & ENVIRONMENTAL DEMANDS

• N/A

TIME TRAVEL REQUIRED

• N/A

The successful candidate will embrace Vertiv’s Core Principals & Behaviors to help execute our Strategic Priorities.

OUR CORE PRINCIPALS: Safety. Integrity. Respect. Teamwork. Diversity & Inclusion.

OUR STRATEGIC PRIORITIES

• Customer Focus
• Operational Excellence
• High-Performance Culture
• Innovation
• Financial Strength

OUR BEHAVIORS

• Own It
• Act With Urgency
• Foster a Customer-First Mindset
• Think Big and Execute
• Lead by Example
• Drive Continuous Improvement
• Learn and Seek Out Development

At Vertiv, we’re on a mission to empower the people that will power the future. From a simple swipe to life-changing medicines, from push notifications to generative AI. We design, manufacture, and service the products and solutions that keep the world connected. With $6.9 billion in revenue, a strong customer base and global reach spanning nearly 70 countries, we are uniquely positioned to deliver greater value to our customers and create new opportunities for our people.

Vertiv is an Equal Opportunity/Affirmative Action employer. We promote equal opportunities for all with respect to hiring, terms of employment, mobility, training, compensation, and occupational health, without discrimination as to age, race, color, religion, creed, sex, pregnancy status (including childbirth, breastfeeding, or related medical conditions), marital status, sexual orientation, gender identity / expression (including transgender status or sexual stereotypes), genetic information, citizenship status, national origin, protected veteran status, political affiliation, or disability. If you have a disability and are having difficulty accessing or using this website to apply for a position, you can request help by sending an email to help.join@vertivco.com If you are interested in applying or learning more about this role, please visit the company’s career page located on Vertiv.com/Careers

Work Authorization

No calls or agencies please. Vertiv will only employ those who are legally authorized to work in the United States. This is not a position for which sponsorship will be provided. Individuals with temporary visas such as E, F-1, H-1, H-2, L, B, J, or TN or who need sponsorship for work authorization now or in the future, are not eligible for hire.