Data Protection Specialist (Microsoft Purview)

Job title: Data Protection Specialist (Microsoft Purview)

Job location: Philadelphia, PA ( hybrid- 2 days onsite)

Job type: Full time

One of the largest healthcare is seeking a Data Protection Specialist (Microsoft Purview). The Data Protection Specialist will be responsible to design, implement, and manage the organization’s data governance, information protection, and compliance capabilities across Microsoft 365. This role will serve as a hands-on technical lead for the Microsoft Purview platform, responsible for protecting sensitive data, enabling regulatory compliance, and responding to data risks across the enterprise.

The ideal candidate has deep practical experience with Microsoft Purview (formerly Microsoft 365 Compliance) and is comfortable working cross‑functionally with Security, IT, Legal, Compliance, and business stakeholders. This role requires both strategic design and day‑to‑day operational execution.

Job Duties

Microsoft Purview Strategy & Implementation

• Design, implement, and manage Microsoft Purview capabilities, including:
• Microsoft Information Protection (MIP) – sensitivity labels, label policies, auto‑labeling, encryption, and rights management
• Data Loss Prevention (DLP) – policies for email, SharePoint, OneDrive, Teams, endpoints, and third‑party applications
• Data Lifecycle Management & Records Management – retention labels, retention policies, and defensible disposal
• Insider Risk Management – risk indicators, policies, alerts, and investigation workflows
• eDiscovery & Audit – content searches, legal holds, audit log investigations, and evidence collection
• Integrate Purview controls across Microsoft 365 workloads including Exchange Online, SharePoint Online, OneDrive, Teams, Defender, and hybrid environments where applicable
• Serve as the technical subject‑matter expert and platform owner for Microsoft Purview

Data Classification & Governance

• Develop and maintain an enterprise data classification framework aligned with business needs and regulatory requirements
• Partner with business units to identify and protect sensitive data such as PII, PHI, financial data, and intellectual property
• Implement scalable data discovery using built‑in classifiers, trainable classifiers, and auto‑classification policies
• Ensure data protection controls are effective while maintaining usability and business productivity
• Generative AI and Agentic AI Governance

Compliance, Risk & Incident Response

• Translate regulatory requirements (GDPR, HIPAA, HITRUST and industry‑specific regulations) into enforceable technical controls
• Monitor compliance posture using Microsoft Compliance Manager and recommend remediation actions
• Investigate and respond to DLP incidents, insider risk alerts, and policy violations
• Support internal and external audits by producing audit logs, reports, and compliance evidence
• Collaborate with Legal, Compliance, HR, and Security teams during investigations and regulatory inquiries

Automation & Operational Excellence

• Use PowerShell to automate Purview configuration, reporting, and operational tasks
• Continuously tune and improve policies to reduce false positives and improve signal quality
• Develop documentation, runbooks, and operational procedures to support ongoing governance and incident response

Minimum Qualifications

• 7-10 years preferred work experience.
• 5 years related work experience
• Hands‑on experience designing and managing Microsoft Purview in a production enterprise environment
• Experience implementing and managing:
• Sensitivity labels and encryption
• DLP policies across cloud, endpoint, and SaaS applications
• Retention and records management policies
• Insider Risk Management and alert investigations
• eDiscovery (Standard and/or Premium) and audit logging

Preferred Qualifications

• Proficiency with PowerShell for automation and reporting
• Experience in highly regulated industries (e.g., healthcare, financial services, government)
• Experience integrating Purview with third‑party security or governance tools
• Prior ownership of enterprise DLP or information protection programs
• Experience implementing and managing DSPM for AI