Cybersecurity Consultant- Purview

Key Responsibilities

Microsoft Purview Deployment & Configuration

• Design and implement sensitivity labelling frameworks, including label taxonomy, encryption, and access controls
• Configure autolabelling using Sensitive Information Types (SIT), trainable classifiers, and EDM (Exact Data Match)
• Deploy and tune Data Loss Prevention (DLP) policies across Exchange, SharePoint, OneDrive, Microsoft Teams, and (where applicable) endpoints
• Implement Data Lifecycle Management:
  • Retention policies and retention labels
  • Records and regulatory records
  • Disposition reviews and eventbased retention

Data Risk & Security Management

• Configure and operate Insider Risk Management scenarios, alerts, and cases while ensuring privacy and compliance requirements are met
• Enable and maintain Purview Audit (Standard/Premium) for monitoring, investigations, and regulatory traceability
• Deploy and operate Data Security Posture Management (DSPM):
  • Identify data exposure risks
  • Analyse overpermissions and sensitive data sprawl
  • Prioritize remediation actions
• Implement and monitor DSPM for AI, including:
  • Copilot data exposure analysis
  • AIrelated overexposure and permission risks
  • Alignment between AI usage, labels, permissions, and DLP controls

Data Governance & Visibility

• Configure Purview Data Catalog:
  • Data discovery and scanning
  • Metadata enrichment
  • Business glossary
  • Data owner and steward assignments
• Support improved data discoverability while aligning with security and compliance constraints

Operations, Reporting & Stakeholder Collaboration

• Run daytoday Purview operations:
  • Alerts, reports, investigations, dashboards
  • Continuous tuning to reduce false positives and improve adoption
• Translate legal, regulatory, and compliance requirements into technical Purview controls
• Work closely with:
  • Security teams
  • Legal & Compliance
  • Privacy / GDPR stakeholders
  • IT and Workplace teams
• Support audits, assessments, and compliance reviews using Purview evidence and reporting

We are looking for a handson Microsoft Purview Data Security & Compliance Engineer to design, deploy, and operate Microsoft Purview capabilities across our Microsoft 365 environment. This role will be responsible to establish and deploy Purview features as part of ongoing POC, or MVP run in SG group

Including and not limited to Information Protection, DLP, Data Lifecycle & Records Management, Insider Risk Management, Audit, Data Catalog, DSPM, and DSPM for AI (Copilot).

While testing the purview features as part of the MVPs, it is expected that the tests run are documentd in "test workbook" document.

While considering the move to prod, it is also expected from the candidate to design the run processes of the solution ( who will update the policy, how we can monitor that the security feature is working over the long run)

The position combines technical expertise, governance understanding, and operational accountability.