> Markdown version of [/jobs/ext/1893879-sr-data-protection-governance-analyst](https://www.wearedevelopers.com/jobs/ext/1893879-sr-data-protection-governance-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr Data Protection & Governance Analyst - **Company:** Starkey Hearing Technologies - **Location:** Eden Prairie, MN, United States - **Experience:** Expert - **Salary:** $86,000.0 - $117,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Excel, Microsoft Windows, Artificial Intelligence, Microsoft Outlook, Software as a Service, Cloud Storage, Cyber Security, Information Leak Prevention, Data Security, Data Stores, Document Management Systems, Microsoft Security Essentials, Performance Tuning, Productivity Software, Regular Expressions, Microsoft SharePoint, Data Streaming, Data Processing, Data Classification, Microsoft Power Automate, Large Language Models, Prompt Engineering, Information Technology, Data Management, Virtual Agents, Servicenow - **Published:** August 1, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/17776069?backUrl=%2Fcareer%2F17776069%2FSr-Data-Protection-Governance-Analyst-Minnesota-Eden-Prairie ## About the Role + Bachelor's degree in cybersecurity, information security, computer science, information technology, or a related field - or equivalent hands-on experience. Experience * + 5+ years in information security or IT + 3+ years of hands on Microsoft Purview/DLP experience Knowledge / Technical Requirements * Hands-on Microsoft Purview experience: DLP policies, sensitivity labels, Sensitive Information Types, trainable classifiers, and the M365 compliance/security portals. * Working knowledge of Microsoft 365 / Entra ID administration: dynamic groups, scoping, role-based access, and tenant security/compliance settings. * Practical regex skills and an understanding of data classification methodology. * Familiarity with the broader Microsoft security stack (Defender, Sentinel) and how DLP/labeling data flows into monitoring * Ability to build and maintain an AI assistant/agent for internal users, using a retrieval-augmented (knowledge-grounded) approach so answers are sourced from our own policies and documentation rather than generic model knowledge. * Familiarity with enterprise AI tooling available in our environment - Microsoft Copilot Studio and Security Copilot (both available under E5) are the most direct fit - and/or general experience with LLM platforms, prompt design, and connecting a model to a curated knowledge base. * Judgment around responsible/secure AI use: data privacy of prompts and responses, access control, guardrails, and knowing which questions an automated assistant should escalate to a human rather than answer. * Experience iterating on the agent based on real employee questions, and measuring whether it actually deflects routine queries and improves security awareness. * Experience in a regulated / sensitive-data environment (healthcare, medical device, PHI/PII, or IP-heavy manufacturing). * ServiceNow or similar ITSM ticketing workflow experience. * Relevant certifications: Microsoft SC-400 (Information Protection & Compliance Administrator), SC-401, SC-200, or equivalent. Competencies, Skills & Abilities * Demonstrated ability to drive change management and user adoption for security controls - not just configure them. * Strong written and verbal communication; able to create training material and brief both technical and non-technical audiences. * Stakeholder management across business and IT teams, with the patience to negotiate workable controls. * Ability to create employee-facing communications (e.g., a newsletter) and coaching non-technical staff on everyday productivity tools (Outlook, Excel, Teams); approachable, patient, and able to explain technology in easy to understand terms ## Description The Data Protection & Governance Analyst owns the day-to-day operation, governance, and adoption of our data protection program across the Microsoft 365 (E5) environment. This role consolidates a fast-growing body of work - Data Loss Prevention (DLP), sensitivity labeling, and the administration of enterprise-wide security settings - that is currently distributed across existing team members alongside their primary security-operations duties., The Data Protection & Governance Analyst will be the single accountable owner for DLP and information-protection controls in Microsoft Purview, will administer security and compliance settings across our largest enterprise SaaS platforms (starting with Microsoft 365), and will lead the employee training and organizational change management required for those controls to be adopted and sustained rather than worked * Data Loss Prevention and Information Protection + Own the design, configuration, tuning, and validation of DLP policies in Microsoft Purview across email, SharePoint, OneDrive, Teams, and endpoints. + Build and maintain Sensitive Information Types (SITs), including regex-based detection and trainable classifiers, and validate detection accuracy to reduce false positives and coverage gaps. + Administer and govern the sensitivity-label taxonomy, auto-labeling policies, and label-based protection, including the dynamic group / scoping logic that ensures full population coverage. + Investigate DLP alerts and policy matches, triage incidents, and partner with the SOC/MDR provider and Security Engineering on escalations. * Enterprise SaaS Security Administration + Administer the security, compliance, and data-governance settings of large enterprise SaaS solutions, with Microsoft 365 / Purview as the primary platform. + Maintain configuration baselines, document control settings, and support periodic posture assessments and audit/risk-assessment requests. + Coordinate data-protection requirements for new integrations and data flows (e.g., analytics pipelines, mirrored/replicated data stores, and SaaS-to-SaaS connections). + Investigate DLP alerts and policy matches, triage incidents, and partner with the SOC/MDR provider and Security Engineering on escalations. * Training and Change Management + Develop and deliver end-user training and enablement on sensitivity labels, DLP behavior, and secure data-handling expectations. + Lead the change management for new and updated controls - communications, rollout sequencing, stakeholder readiness, and feedback loops - so controls are adopted with minimal business disruption. + Partner with business units (e.g., Business Intelligence / Enterprise Analytics and application teams) to translate their data-handling needs into appropriate, workable protection policies. * AI Enablement * Design, build, and maintain an internal AI assistant/agent that lets employees self-serve answers to security-program questions - e.g., "How do I label this document?", "Can I share this externally?", "What's our policy on personal cloud storage?" - grounded in our own policies, standards, and DLP/labeling guidance. * Curate and maintain the knowledge base behind the agent (policies, FAQs, control documentation) so responses stay accurate as the program evolves, and establish guardrails so the agent declines or escalates questions it shouldn't answer. * Apply secure-by-design practices to the agent itself: appropriate data handling for prompts/responses, access scoping, and avoidance of sensitive-data exposure through the tool. * Identify other practical applications of AI to the data-protection program (e.g., assisting with classification, drafting policy language, or triaging DLP alerts) and pilot them where they add measurable value. * Employee Enablement and Communications + Produce a recurring IT/security newsletter and related employee communications that build awareness and reinforce good data-handling habits. + Develop and deliver general end-user enablement on core productivity tools (e.g., Microsoft Outlook, Excel, Teams), including quick-reference guides, tips, and informal training. + Serve as point of contact for employee "how do I..." questions on IT and productivity tools, and feed recurring questions back into training material and the AI assistant. ## Related Videos - [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture) - [Startup Presentation: StorX - Future of Cloud Storage](https://www.wearedevelopers.com/videos/1176-startup-presentation-storx-future-of-cloud-storage) - [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1520-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Security Challenges of Breaking A Monolith](https://www.wearedevelopers.com/videos/362-security-challenges-of-breaking-a-monolith) - [Giving the individual control of their data: Open Source Decentralized Web Nodes](https://www.wearedevelopers.com/videos/1100-giving-the-individual-control-of-their-data-open-source-decentralized-web-nodes) ## Related Articles - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 119 - ❤️ === ❤️](https://www.wearedevelopers.com/magazine/454-dev-digest-119) - [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers) - [Dev Digest 129 - Now that's what I call private data!](https://www.wearedevelopers.com/magazine/468-dev-digest-129-now-that-s-what-i-call-private-data)