About the Role
The Technical Data Protection function implements and operates technical controls to protect sensitive, confidential, personal, financial, and payment data.
Responsibilities
•Implement, configure, and operate DLP controls across endpoints, cloud services, email, collaboration platforms, and data storage environments
•Create and maintain DLP policies for personal, financial, payment, confidential, and other sensitive data
•Integrate data classification and labelling with technical enforcement and monitoring controls
•Develop detection logic based on data types, labels, content patterns, context, user behaviour, destinations, and business processes
•Investigate DLP alerts and potential data leakage cases with SOC, Legal, Privacy, HR, and relevant business teams
•Tune policies to reduce false positives while maintaining effective protection and monitoring coverage
•Implement data discovery and scanning processes to identify sensitive data across corporate environments
•Support the implementation of encryption, masking, tokenisation, access controls, and other technical data protection mechanisms
•Collect DLP and data security events in SIEM and create monitoring dashboards, alerts, and operational metrics
•Integrate data protection tools with SIEM, Jira, identity platforms, cloud services, and automation workflows
•Automate repetitive operational tasks, policy deployment, evidence collection, reporting, and incident enrichment
•Test data protection controls and validate policies before production rollout
•Maintain technical documentation, operating procedures, implementation guides, and response playbooks
•Support onboarding new systems, repositories, data sources, and business processes into the data protection framework
•Identify control gaps and propose technical improvements based on incidents, testing results, and monitoring data
•Support audits and regulatory assessments by providing technical evidence of implemented data protection controls
Requirements
•1+ Years of experience in Information Security, Security Engineering, Data Security, DLP, or a related technical role
•Practical experience implementing or operating DLP, data classification, data discovery, or cloud security controls
•Understanding of sensitive data types, data flows, data handling risks, and common data leakage scenarios
•Experience creating, testing, and tuning security policies and detection rules
•Understanding of encryption, masking, tokenisation, access control, and secrets protection
•Experience analysing security events, investigating alerts, and documenting findings
•Familiarity with cloud services, enterprise collaboration platforms, and modern data environments
•Basic scripting or automation skills using Python, Bash, APIs, or workflow automation tools
•Strong troubleshooting skills, attention to detail, and a structured approach to technical implementation
•Ability to collaborate with technical and non-technical teams
•English B1+ for working with documentation, tools, and international teams
Nice to Have
•Experience with Google Workspace DLP, endpoint DLP, CASB, or similar security technologies
•Experience with data discovery and classification across cloud storage, databases, or DWH platforms
•Familiarity with Elastic Stack or another SIEM platform
•Experience with AWS, Snowflake, PostgreSQL, or Kubernetes
•Understanding of PCI DSS, privacy regulations, and financial data protection requirements
•Experience integrating security products through APIs
•Experience building dashboards, reports, or automated security workflows
•Relevant security, cloud, or data protection certifications
Conditions
•Relocation support to one of the company's hubs — Cyprus, Serbia, Georgia or Kazakhstan — with assistance for the employee and their family
•Flexible work from one of the company's offices or remote
•Healthcare coverage
•Education budget for language lessons, professional training, and certifications
•Wellness budget for mental health and fitness activity reimbursements
•20 days of annual leave and paid sick leave
