Endpoint Data Loss Prevention Lead

Endpoint Data Loss Prevention Lead

The eDLP Lead, Senior Specialist is responsible for the design, engineering, and operational leadership of the enterprise endpoint data loss prevention program. This role owns policy architecture, detection tuning, and platform health across Windows and macOS endpoints, and leads the technical execution of the organization's migration from legacy endpoint DLP tooling to a modern, cloud-delivered inline enforcement model. The individual partners closely with Security Operations, Insider Risk, Privacy, Legal, and Infrastructure teams to ensure sensitive data controls are effective, defensible, and aligned to regulatory obligations. This is a senior individual contributor role with significant influence over control strategy and mentorship responsibility for junior engineers.

Core Responsibilities:

• Leads the technical migration from legacy endpoint DLP agents (e.g., Digital Guardian) to cloud-delivered endpoint protection platforms (e.g., Zscaler Client Connector / Zscaler Endpoint DLP), including agent coexistence strategy, policy parity mapping, and phased cutover.
• Designs and enforces end-user notification (EUN), coaching, and justification workflows that balance control effectiveness against user friction and productivity impact.
• Builds automation and integrations via REST APIs, SIEM/SOAR pipelines, and CI/CD to reduce manual effort in policy deployment, incident enrichment, and reporting.
• Defines and reports program metrics — coverage, detection efficacy, false positive rate, mean time to triage, and policy drift — to security leadership.
• Evaluates emerging data security technologies.
• Mentors junior engineers and analysts, builds team technical depth, and leads knowledge transfer and cross-training initiatives.
• Participates in special projects and performs other duties as assigned.

Qualifications

• Required

• Minimum 8 years in information security, with at least 5 years of hands-on endpoint DLP engineering and operations.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field; equivalent professional experience considered.

• Deep hands-on expertise with Zscaler Endpoint DLP (ZDP) / Zscaler Data Protection, including Zscaler Client Connector, forwarding profiles, and endpoint policy configuration.

• Hands-on expertise with Digital Guardian, including DGMC policy and rule authoring, agent deployment and upgrade management, control set design, and incident workflow administration.

• Demonstrated experience leading an endpoint security agent migration or consolidation at enterprise scale.

• 4+ years of scripting and automation experience (Python, PowerShell, Shell) for endpoint policy management, reporting, and API-driven integration.

• 3+ years working with security telemetry and SIEM platforms (Elastic, Splunk, or equivalent) for endpoint DLP incident analysis and reporting.

• Proficiency in JIRA, Confluence, ServiceNow, and Agile/Scrum delivery.

• Preferred

• Experience with Microsoft Purview Information Protection, sensitivity labeling, and Microsoft 365 oversharing remediation.

• Experience implementing data controls for GenAI and LLM usage, including prompt and upload inspection.

• Familiarity with UEBA and insider risk analytics platforms.

• Industry certifications: CISSP, CCSP, GCFA, GCED, or vendor certifications in Zscaler (ZDTA, ZCCP-DP) or Digital Guardian.

• Experience supporting regulatory examination and audit evidence production in a financial services or other highly regulated environment.

Competencies:

• Operates with autonomy in ambiguity; translates emerging data risks into actionable control requirements.

• Communicates technical risk clearly to non-technical and executive audiences.

• Influences across organizational boundaries without direct authority.

• Balances control rigor against business enablement and user experience.

• Special Factors

• Sponsorship

• Vanguard is not offering visa sponsorship for this position.

• About Vanguard

• At Vanguard, we don't just have a mission—we're on a mission.

• To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

• How We Work

• Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.

• Our commitment to you

• Vanguard takes the same long-term view of your success—at work and in life—with Benefits and Rewards packages that reflect what you care about, throughout all the phases and stages of your life.

• Our commitment to equal employment opportunity

• Vanguard is an equal opportunity employer. Vanguard is committed to providing all crew members a working environment that is free from discrimination, prejudice and bias. Through this Equal Employment Opportunity (EEO) Policy, Vanguard reaffirms its commitment to equal employment opportunity for all applicants and crew members without regard to race, color, national origin or ancestry, religion, gender, sex, sexual orientation, gender identity or expression, age, disability, marital status, veteran or military status. In addition, Vanguard prohibits discrimination based on genetic information, as well as any other characteristic protected by federal, state or local law.

• Applicants with disabilities may be entitled to reasonable accommodation under the Americans with Disabilities Act and certain state or local laws. A reasonable accommodation is a change in the way things are normally done which will ensure an equal employment opportunity without imposing undue hardship on Vanguard. Please inform careers at Vanguard dot com if you need assistance completing this application or to otherwise participate in the application process.

• Let's get started

• Join the Vanguard Talent Network to learn more about life at Vanguard, career opportunities, and more.

• Fields marked with asterisks are mandatory.

• First name

• Last name

• Email address

• City

• State

• Country

• Zipcode

• Area of Interest

• Yes, I agree to the Terms of Use and Privacy Policy

• Yes, I wish to be contacted with marketing and job alert emails from Vanguard. I understand I can unsubscribe at any time.