Key Responsibilities
- Lead requirements discovery, policy design, and implementation for Microsoft Purview Insider Risk Management use cases.
- Develop sensitivity labeling strategies, including taxonomy, default/recommended labeling, auto-labeling, and lifecycle governance.
- Drive pilot deployments, configure and optimize labeling/DLP policies, and assess Sensitive Information Types impact.
- Analyze IRM alerts, reduce false positives, tune policies, and define monitoring and response procedures.
- Create rollout, adoption, governance, technical, and executive documentation across IRM, labeling, and DLP initiatives.
Required Skills & Qualifications
- 6+ years of experience in Data Protection, Information Security, Privacy, or Microsoft Security & Compliance solutions.
- Strong expertise in Microsoft Purview IRM, including use cases, policy design, alert triage, risk indicators, and tuning.
- Hands-on experience with Microsoft Purview Information Protection, Sensitivity Labeling, and DLP across M365 environments.
- Ability to conduct workshops, gather requirements, assess risks, and develop solution designs.
- Strong analytical, documentation, communication, rollout, adoption, and governance capabilities.
Preferred Skills
- Experience with Proofpoint Information Protection, Email Security, DLP, Insider Threat Management, or related security solutions.
- Experience with Microsoft Defender for Cloud Apps, Defender for Endpoint, and related Microsoft security capabilities.
- Knowledge of GDPR, CCPA/CPRA, HIPAA, ISO 27001, ISO 27701, and NIST Privacy Framework.
- Experience in large global enterprises, data classification, records management, and information governance programs.
Preferred Certifications
- Microsoft Certified: Information Protection and Compliance Administrator Associate (SC-400)
- Microsoft Certified: Cybersecurity Architect Expert (SC-100)
- Microsoft Certified: Security Operations Analyst Associate (SC-200)
- Certified Information Privacy Professional (CIPP)
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)
