Data Protection Analyst Microsoft Purview

• Administer and configure Microsoft Purview capabilities, including Data Loss Prevention, Information Protection, Insider Risk Management, and eDiscovery.
• Develop and enforce enterprise data classification and labeling frameworks, including sensitivity labels, auto-labeling, and data retention policies.
• Plan, design, simulate, and deploy DLP policies, utilizing Adaptive Protection for dynamic, risk-based data controls.
• Create, manage, and enforce DLP policies across cloud applications, email, endpoints/devices, Microsoft Fabric, and AI workloads within the Microsoft Purview portal.
• Own platform governance for core data protection capabilities, ensuring safe handling and storage of sensitive business information across cloud workloads.
• Design, implement, and automate enterprise data-protection workflows to reduce manual triage overhead.
• Monitor compliance alerts, investigate data security incidents, and tune policies continuously to optimize detection efficacy and minimize false positives.
• Collaborate closely with Security Operations (SecOps), IT infrastructure, Legal, and Compliance teams to remediate data risks.

Must Have Technical/Functional Skills

• 3+ years of experience in Data Protection, Information Security, Compliance, or Data Governance.
• Hands-on experience with Microsoft Purview suite (DLP, Information Protection, Data Classification, Retention, eDiscovery).
• Strong knowledge of Microsoft 365 Security & Compliance features and architectures.
• Hands-on experience implementing and administering Data Loss Prevention (DLP) policies across Exchange, SharePoint, OneDrive, and Teams.
• In-depth understanding of data classification, sensitivity labels, retention policies, and records management.
• Familiarity with major regulatory frameworks and compliance standards such as GDPR, HIPAA, SOX, ISO 27001, and NIST.
• Proven experience investigating data protection incidents, compliance alerts, and policy violations.
• Solid understanding of Microsoft Entra ID (Azure AD) and modern access management concepts.
• Basic to intermediate PowerShell scripting skills for administration, automation, and reporting.
• Experience building compliance reports, dashboards, and audit-ready documentation.
• Strong analytical, problem-solving, and cross-functional communication skills.
• Ability to collaborate effectively across security, compliance, legal, and business stakeholder groups.
• Bachelor’s degree in Engineering, Computer Science, or a related discipline., * Excellent verbal and written communication skills.
• Strong team collaboration and cross-functional leadership capabilities.
• Commitment to documentation hygiene and team knowledge sharing.
• Relevant industry or Microsoft certifications (e.g., Microsoft Certified: Information Protection and Compliance Administrator Associate [SC-400], SC-900, or related).