Data Protection Specialist – Microsoft Purview

Job Title: Data Protection Specialist – Microsoft Purview

Job Type: Full-time

Job Location: Fort Washington, PA (hybrid- 2 days onsite)

A leading healthcare is seeking an experienced Data Protection Specialist – Microsoft Purview to design, implement, and manage our organization’s data governance, information protection, and compliance capabilities across Microsoft 365. This role will serve as a hands-on technical lead for the Microsoft Purview platform, responsible for protecting sensitive data, enabling regulatory compliance, and responding to data risks across the enterprise

.
The Data Protection Specialist – Microsoft Purview has deep practical experience with Microsoft Purview (formerly Microsoft 365 Compliance) and is comfortable working cross‑functionally with Security, IT, Legal, Compliance, and business stakeholders. This role requires both strategic design and day‑to‑day operational executio

n.
Job Dut

ies
Microsoft Purview Strategy & Implementa

• tionDesign, implement, and manage Microsoft Purview capabilities, includ
• ing:Microsoft Information Protection (MIP) – sensitivity labels, label policies, auto‑labeling, encryption, and rights manage
• mentData Loss Prevention (DLP) – policies for email, SharePoint, OneDrive, Teams, endpoints, and third‑party applicat
• ionsData Lifecycle Management & Records Management – retention labels, retention policies, and defensible disp
• osalInsider Risk Management – risk indicators, policies, alerts, and investigation workf
• lowseDiscovery & Audit – content searches, legal holds, audit log investigations, and evidence collec
• tionIntegrate Purview controls across Microsoft 365 workloads including Exchange Online, SharePoint Online, OneDrive, Teams, Defender, and hybrid environments where applic
• ableServe as the technical subject‑matter expert and platform owner for Microsoft Pur

view

Data Classification & Gove

• rnanceDevelop and maintain an enterprise data classification framework aligned with business needs and regulatory requir
• ementsPartner with business units to identify and protect sensitive data such as PII, PHI, financial data, and intellectual pr
• opertyImplement scalable data discovery using built‑in classifiers, trainable classifiers, and auto‑classification po
• liciesEnsure data protection controls are effective while maintaining usability and business produc
• tivityGenerative AI and Agentic AI Gove

rnance

Compliance, Risk & Incident

• ResponseTranslate regulatory requirements (GDPR, HIPAA, HITRUST and industry‑specific regulations) into enforceable technical
• controlsMonitor compliance posture using Microsoft Compliance Manager and recommend remediation
• actionsInvestigate and respond to DLP incidents, insider risk alerts, and policy vi
• olationsSupport internal and external audits by producing audit logs, reports, and compliance
• evidenceCollaborate with Legal, Compliance, HR, and Security teams during investigations and regulatory i

nquiries
Automation & Operational E

• xcellenceUse PowerShell to automate Purview configuration, reporting, and operatio
• nal tasksContinuously tune and improve policies to reduce false positives and improve signa
• l qualityDevelop documentation, runbooks, and operational procedures to support ongoing governance and incident

response
Minimum Qual

• ifications7-10 years preferred work e
• xperience.5 years related work
• experienceHands‑on experience designing and managing Microsoft Purview in a production enterprise e
• nvironmentExperience implementing and
• managing:Sensitivity labels and
• encryptionDLP policies across cloud, endpoint, and SaaS ap
• plicationsRetention and records managemen
• t policiesInsider Risk Management and alert inve
• stigationseDiscovery (Standard and/or Premium) and aud

it logging
Preferred Qua

• lificationsProficiency with PowerShell for automation an
• d reportingExperience in highly regulated industries (e.g., healthcare, financial services,
• government)Experience integrating Purview with third‑party security or gover
• nance toolsPrior ownership of enterprise DLP or information protecti
• on programsExperience implementing and managing