Data Loss Prevention (DLP) Specialist / Engineer

We are seeking a skilled Sr Consultant - DLP Engineer with hands-on experience in Microsoft 365 Compliance and Security Solutions. The ideal candidate will be responsible for implementing, administering, and managing compliance policies and tools across Microsoft 365 workloads to ensure regulatory alignment, data protection, and risk management.

What You’ll Do

1. Data Classification & Microsoft Information Protection (MIP)

• Administer and maintain sensitivity labels and label policies for structured and unstructured data.
• Modify auto-labelling policies for Exchange, SharePoint, OneDrive, and Teams content as per business requirements.
• Collaborate with data owners and compliance teams to ensure classification schemas align with regulatory and business needs.

2. Data Loss Prevention (DLP)

• Manage and administer DLP policies across Microsoft 365 workloads (Email, Teams, SharePoint, OneDrive).
• Review and act on DLP alerts and reports, triage incidents, and coordinate with security or legal teams as required.
• Update DLP policies to minimize false positives while ensuring compliance with regulatory requirements.
• Modify DLP rules to reflect changes in regulations or internal data-handling standards.

3. Endpoint Data Loss Prevention (Endpoint DLP)

• Configure Endpoint DLP settings and onboard devices through Microsoft Endpoint Manager (Intune).
• Monitor and investigate endpoint policy violations, including data exfiltration attempts via USB, printing, clipboard, etc.
• Coordinate with IT and security teams to ensure complete endpoint coverage and policy compliance.

4. Retention & Records Management

• Manage retention labels and policies to meet legal, regulatory, and operational data retention requirements.
• Oversee disposition reviews and manage deletion workflows in accordance with legal holds and business policies.

5. Insider Risk Management

• Configure and manage insider risk policies to detect risky user behaviors (e.g., data theft, harassment, or policy violations).
• Collaborate with HR, legal, and security teams to define thresholds and workflows for incident investigation.
• Investigate and respond to alerts, risk scores, and activity insights, escalating high-risk cases as needed.

6. eDiscovery (Standard & Premium)

• Manage eDiscovery cases, holds, and search queries to support legal or investigative teams.
• Ensure timely and accurate content collection from Exchange, SharePoint, OneDrive, and Teams.
• Perform review and export operations in eDiscovery Premium while maintaining chain-of-custody integrity.

7. End User Support

• Address issues reported by end users related to Data Classification, DLP, and Microsoft Purview compliance components.

What You’ll Bring

• 5–8 years

  of experience in Microsoft 365 Security & Compliance, Information Protection, or related domains.
• Strong expertise in

  Microsoft Purview (Compliance)

  solutions, including MIP, DLP, Insider Risk, Records Management, and eDiscovery.
• Proficiency in

  Microsoft 365 Security & Compliance Portal

  and

  Microsoft Endpoint Manager (Intune)

  .
• Solid understanding of key

  regulatory frameworks

  such as GDPR, HIPAA, ISO, and data governance best practices.
• Proven ability to

  analyze compliance alerts and incidents

  , and effectively collaborate with cross-functional teams (Legal, HR, Security, IT).
• Hands-on experience with

  PowerShell scripting

  for compliance administration (preferred).
• Excellent

  problem-solving, documentation, and communication

  skills.