Data Leakage Prevention - Information Security Specialist - Group Security (f/m/d)

In this role you will own and evolve the Data Leakage Prevention (DLP) governance framework for the Group, ensuring policy alignment with risk and regulatory expectations. You will provide direction and oversee service outcomes, partnering with IT delivery teams and business stakeholders to improve governance, risk oversight, and assurance. You drive continuous improvement, incident coordination, and ensure clear accountability across governance, operations, and delivery. This is a strategic, hands-on governance leadership role with a strong focus on risk-based decision making and service excellence.

• Define and evolve DLP governance requirements, policies and written rules
• Oversee the DLP control framework, mandatory controls, and governance expectations
• Ensure documented responsibilities and separation of duties across governance, operations and delivery
• Monitor adherence to DLP requirements and guide remediation actions
• Support risk assessments, deviations, and exception handling with stakeholders
• Manage audit and assurance activities with governance input and remediation oversight
• Act as governance owner for enterprise DLP service and ensure alignment with policies and service objectives
• Oversee service performance, KPIs, SLAs, and issue lifecycle with delivery teams
• Coordinate incidents, changes and improvement initiatives to achieve timely, risk-aligned outcomes
• Serve as primary contact for DLP governance matters with business, IT, and risk stakeholders
• Provide guidance on DLP requirements, service capabilities and data handling practices
• Support projects by advising on DLP governance and service implications

• Bachelor’s degree in Cybersecurity or related discipline
• Experience in information security governance, data protection, or risk management in regulated environments
• Solid understanding of DLP principles (information handling, classification, secure data transfer, email and endpoint controls)
• Experience applying GDPR, DORA and frameworks such as ISO/IEC 27001, NIST
• Strong analytical, documentation and stakeholder management skills
• Ability to translate governance requirements into practical, business-aligned rules and service expectations
• Proficiency in English; German is a plus
• High ownership, adaptability and proactive mindset

• stakeholder management
• analytical thinking
• clear communication
• DLP governance
• risk management
• regulatory compliance (GDPR, DORA)