This position involves owning the enterprise data classification program using Fortra Titus as the primary platform. You will be responsible for designing the label taxonomy, engineering enforcement across Windows and Microsoft 365 apps, integrating classification metadata with Forcepoint DLP and Seclore DRM, promoting adoption, and ensuring change hygiene and evidence alignment. As the final escalation point for classification issues, you will also mentor L2 engineers and lead audits for Data Security controls. By implementing Fortra Titus labeling correctly, you can significantly enhance downstream DLP accuracy and governance.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Location
Riyadh, on-site (Sun–Thu, business hours)
Working Model
Occasional change windows and P1 escalation support.
Key Responsibilities
- Define and maintain the classification taxonomy (labels, markings, handling rules, exceptions) and publish through Titus Policy Manager (SaaS/on-prem).
- Engineer user-driven and automatic classification in Office/Outlook with mandatory prompts and save/send enforcement; ensure consistent persistent metadata for downstream controls.
- Integrate Titus metadata into Forcepoint DLP detection and actions; drive policy tuning to reduce false positives/negatives.
- Own the configuration lifecycle (versioning, test → prod promotion, rollback plans) under ITIL Change; publish SOPs/runbooks and update knowledge articles.
- Lead classification-related P1/P2 incidents (mislabeling, blocking, leakage workflows); perform RCA and implement preventive changes across Titus/DLP/DRM.
Required Qualifications
- 7+ years in data protection, including 3+ years hands-on experience with Fortra Titus DCS at enterprise scale (taxonomy, Policy Manager, O365/Outlook enforcement).
- Proven experience delivering integrations with Forcepoint DLP and Seclore DRM (policies driven by Titus metadata).
- Strong understanding of Windows/O365 admin basics; experience with ITIL Change/Incident management and evidence-quality documentation for regulated audits (banking).
- Comfortable collaborating across Data Protection, Email, Endpoint, Database Security, and SOC teams.
Day-to-day
- Build and publish Titus configurations, update label sets/markings, and test enforcement before rollout.
- Tune Forcepoint DLP rules to reference Titus tags; manage exceptions with expiry and approvals.
- Track KPIs: coverage %, label adoption %, DLP false positive rate, exception backlog, and incident mean time to recovery; publish weekly reports.
- Mentor L2 engineers; provide training for Service Desk and business champions.
- Ensure readiness for internal reviews and checks.
