Business Consultant (Information Security & Data Governance)

• Comfortable navigating around sourcing, and data discovery
• Data classification, sensitivity assessment, and information governance
• Microsoft Purview labeling and classification
• Analysis of structured and unstructured data, including documents, reports, presentations, emails, and business records
• Data protection, privacy, and information security risk assessment
• Stakeholder engagement across IT, business functions, system owners, data owners, and senior leadership
• Interviewing, questionnaire development, active searching, and lead follow-up
• Business process analysis and data landscape assessment
• Critical thinking, analytical reasoning, and sound judgment in ambiguous situations
• Ability to document classification decisions and clearly articulate supporting rationale
• Cross-functional collaboration and influencing without direct authority
• Trusted-advisor relationship management
• Ability to learn complex business processes across multiple functions

Works with end user groups to identify technical solutions to business problems or inefficiencies. Evaluates existing systems and/or user needs and makes recommendations. May require certification in specific applications. Requires a bachelor’s degree and experience in the field or in a related area. Familiar with a variety of the field’s concepts, practices, and procedures. Provides consultation on business process topics related to the ADMS services that are being delivered by other resources. Generally supports mainstream skills or common packages/platforms. Relies on experience and judgment to plan and accomplish goals. Performs a variety of complicated tasks. May lead and direct the work of others. A wide degree of creativity and latitude is expected.

The successful candidate will demonstrate strong critical-thinking and analytical skills, with the ability to interpret complex data assets, particularly unstructured content such as documents, reports, presentations, emails, and other business records. This role requires sound judgment when evaluating the context, sensitivity, business value, and potential risks associated with data.

The candidate will apply this understanding to support document labeling and data classification using Microsoft Purview, while aligning classification decisions with internal data-classification framework, policies, and governance standards. They will be expected to analyze ambiguous or incomplete information, identify the appropriate classification, and clearly document and communicate the rationale behind their decisions., * Experience identifying, evaluating, and documenting sensitive, confidential, or highly restricted information assets across a complex enterprise environment.

• Experience conducting data discovery and sourcing activities through active research, stakeholder interviews, questionnaires, follow-up, and collaboration with business and technology teams.
• Experience partnering with IT System Owners, Business System Owners, data owners, and senior business leaders to understand data content, context, sensitivity, business value, and associated risks.
• Experience analyzing unstructured content-including business documents, presentations, reports, emails, and other records-to determine appropriate data classifications.
• Experience supporting or administering document labeling and data-classification capabilities, preferably using Microsoft Purview.
• Experience serving as a trusted advisor or subject-matter resource to business and IT stakeholders on data protection and information governance.
• Experience influencing stakeholders and motivating data owners or system owners to adopt appropriate security and protection measures.
• Experience documenting classification decisions, assessments, risks, remediation actions, and business rationale.
• Experience working independently in a matrixed, cross-functional organization and managing multiple sourcing or assessment activities simultaneously.
• Experience learning and evaluating business processes across multiple functional areas., * Experience in information security, data governance, privacy, records management, risk management, or a related discipline.
• Experience with Microsoft Purview Information Protection, sensitivity labels, data discovery, or related Microsoft security technologies Preferred but not required
• Familiarity with enterprise data-classification models and information-protection controls.
• Experience in the pharmaceutical, healthcare, life sciences, or another highly regulated industry.
• Bachelor’s degree in information technology, cybersecurity, information systems, business, or a related field, or equivalent practical experience