Data Loss Prevention (DLP) Analyst

Position: Consultant Data Loss Prevention (DLP) Analyst Location: Bangalore Shift: General Experience: Around 3–5+ years in Cyber Security, Information Security, Security Operations, Data Protection, or a related technical discipline POSITION DESCRIPTION The Data Loss Prevention (DLP) Analyst is part of CGI's Global Security Operations Centre (GSOC), which provides enterprise wide security monitoring, threat detection, incident response, and data protection services across the organisation. The DLP Analyst is responsible for monitoring, analysing, and investigating Data Loss Prevention (DLP) events to identify and mitigate risks relating to the unauthorised disclosure, misuse, or loss of sensitive information. Working closely with Security Monitoring, Incident Response, Insider Threat, Security Engineering, and business stakeholders, the role supports the protection of CGI's information assets while enabling secure business operations. The DLP Analyst is responsible for investigating DLP alerts, validating policy violations, identifying malicious or accidental data loss, and coordinating appropriate response activities. In addition, the role contributes to the ongoing development and optimisation of CGI's DLP capabilities by improving policies, reducing false positives, supporting new technology deployments, and ensuring data protection controls remain effective. This role requires a strong understanding of data protection principles, cybersecurity, cloud services, Microsoft 365, endpoint technologies, and modern collaboration platforms. The successful candidate will possess excellent analytical and investigative skills, demonstrate sound judgement when assessing risk, and effectively communicate technical findings to both technical and non technical stakeholders. POSITION RESPONSIBILITIES Key Responsibilities The following are the key responsibilities related to this role: . Monitor and investigate Data Loss Prevention (DLP) alerts across endpoint, email, cloud, and collaboration platforms. . Analyse DLP events to determine whether activity represents accidental data exposure, policy violations, insider threats, or malicious exfiltration. . Conduct investigations into suspected data loss incidents, documenting findings and recommending appropriate remediation actions. . Work closely with Incident Response, Security Monitoring, Insider Threat, Legal, HR, Privacy, and business teams during investigations where appropriate. . Escalate confirmed security incidents in accordance with established incident response procedures. . Develop, maintain, and optimise DLP policies to improve detection accuracy while reducing false positives. . Support the implementation and ongoing administration of enterprise DLP technologies. . Identify trends and recurring data protection risks, providing recommendations to strengthen organisational controls. . Produce clear technical reports and management summaries relating to DLP investigations and operational metrics. . Contribute to the continuous improvement of DLP processes, playbooks, and operational procedures. . Support user awareness initiatives by identifying common data handling issues and recommending improvements to security awareness programmes. . Maintain awareness of emerging threats, data protection regulations, and industry best practices. . Ensure activities are conducted in accordance with organisational policies, regulatory obligations, and recognised security frameworks. . Support user awareness initiatives by identifying common data handling issues and recommending improvements to security awareness programmes. QUALIFICATIONS TO BE SUCCESSFUL IN THIS ROLE Experience . Experience working within cybersecurity, information security, security operations, data protection, or a related technical discipline. . Experience investigating security alerts or data protection events in an enterprise environment. . Good understanding of Data Loss Prevention (DLP) concepts, information classification, and data protection principles. . Knowledge of common data exfiltration techniques, insider threats, and information security risks. . Experience developing DLP policies, tuning detection rules, and reducing false positives. . Strong analytical and investigative skills with the ability to assess business risk and prioritise appropriately. . Excellent written and verbal communication skills. . Ability to work collaboratively with technical and non technical stakeholders across the organisation. . Experience administering enterprise DLP platforms such as ZScaler DLP. . Knowledge of Microsoft Information Protection (MIP), sensitivity labels, and data classification. . Experience supporting Insider Risk Management investigations. . Understanding of regulatory requirements such as GDPR, ISO 27001, PCI DSS, or other data protection frameworks. Qualifications & Certifications Bachelor's degree in Cyber Security, Information Security, Computer Science, Information Technology, or a related discipline, or equivalent practical experience Relevant industry certifications are desirable, including one or more of: . Microsoft SC 400: Information Protection Administrator . Microsoft SC 200: Security Operations Analyst . Microsoft SC 900: Security, Compliance, and Identity Fundamentals . Zscaler Certified Administrator (ZDTA) . Zscaler Data Security (EDU 220) . Zscaler Data Security Certified . CompTIA Security+ . Certified Information Privacy Professional (CIPP/E) . CISSP . CISM