Lead - Information Security

Stakeholder engagement:

• Act as the primary operational contact for DLP incidents and service performance matters.
• Work with Security Operations, HR, Legal, Privacy, Compliance and business stakeholders according to defined roles and escalation requirements.
• Communicate incident facts, risk, required actions and operational constraints clearly and proportionately.
• Ensure ownership boundaries are clear, particularly where action is required from platform administrators, infrastructure teams or business owners.

Experience and qualifications:

• Bachelor’s degree in information security, Cybersecurity, Computer Science or a related discipline, or equivalent practical experience.
• Substantial experience in information security operations, including hands-on involvement in DLP alert monitoring and incident investigation.
• Experience leading or coordinating an operational security team or service.
• Strong understanding of data-loss scenarios across email, endpoint, web, cloud and collaboration channels from an operational monitoring perspective.
• Experience with incident management, case documentation, escalation, root-cause analysis and corrective-action tracking.
• Ability to interpret DLP events in business context and make proportionate, risk-based decisions.
• Experience producing operational metrics and communicating trends, risks and service issues to management.
• Knowledge of data classification, information handling requirements and relevant security or compliance frameworks.
• Excellent written and verbal communication skills, with the ability to handle sensitive matters professionally.

Core competencies

• Operational leadership and sound judgement
• Risk-based prioritisation and decision-making
• Incident investigation and analytical thinking
• Quality assurance and attention to detail
• Clear stakeholder communication
• Process ownership and continuous improvement
• Confidentiality, integrity and professional discretion

Success measures:

• Timely and risk-aligned handling of DLP alerts and incidents.
• Consistent investigation quality, evidence standards and case closure.
• Controlled backlog and appropriate escalation of high-risk matters.
• Reduced repeat issues through actionable trend analysis and follow-through.
• Clear, accurate and decision-useful operational reporting.
• Well-maintained procedures, playbooks and team readiness.
• Effective coordination with technical owners without transferring platform administration into the operations role.