About the job
Job Summary
As the lead for the enterprise data classification program, you will leverage the Fortra Titus platform to establish a robust data governance framework. Your responsibilities include designing a comprehensive labeling taxonomy, engineering enforcement mechanisms across Windows and Microsoft 365 applications, and integrating classification metadata with Forcepoint DLP and Seclore DRM. You will drive user adoption and ensure compliance with SAMA CSF and NCA ECC while serving as the final escalation point for classification issues. Additionally, you will mentor Level 2 engineers and conduct audits related to Data Security controls. Proper implementation of Fortra Titus labeling is crucial for enhancing DLP accuracy and compliance.
Tool Stack & Scope (Primary → Adjacent)
- Primary: Fortra Titus Data Classification Suite (DCS) for Windows & Microsoft Office/Outlook (policy manager, client add-ins, enforcement, audit). Integrations: Forcepoint DLP (consume Titus tags/metadata in policies), Seclore DRM (rights templates driven by classification), SIEM for audit events.
- Adjacent Toolset: Forcepoint DLP (Email/Host), Seclore DRM, Imperva DAM, Trend Micro (Apex One / ScanMail), Carbon Black EDR, Tripwire/FIM, OPSWAT MetaDefender Kiosk, Data Patrol Watermark, Nexthink (analytics).
Key Responsibilities
Architecture & Program Ownership
- Define and maintain the classification taxonomy (labels, markings, handling rules, exceptions) and publish through Titus Policy Manager (SaaS/on-prem).
- Engineer user-driven and automatic classification in Office/Outlook with mandatory prompts and save/send enforcement; ensure consistent persistent metadata for downstream controls.
- Align Titus fields with Microsoft sensitivity labels as necessary (coexistence scenarios).
Integration & Control Efficacy
- Integrate Titus metadata into Forcepoint DLP detection and actions; optimize policy settings to minimize false positives and negatives.
- Coordinate Seclore DRM policy/rights templates based on classification; ensure protected files remain discoverable by DLP/CASB/SEG where feasible.
- Onboard SIEM for classification and enforcement events; maintain relevant dashboards and KPIs.
Operations, Change & Evidence
- Oversee configuration lifecycle (versioning, test to production promotion, rollback plans) under ITIL Change; publish SOPs/runbooks and update knowledge articles.
