Data Protection Specialist (Microsoft Purview)

• Job title: Data Protection Specialist (Microsoft Purview)
• Job location: Fort Washington, PA ( hybrid- 2 days onsite)
• Job type: Full time

One of the largest healthcare is seeking a Data Protection Specialist (Microsoft Purview). The Data Protection Specialist will be responsible to design, implement, and manage the organization’s data governance, information protection, and compliance capabilities across Microsoft 365. This role will serve as a hands-on technical lead for the Microsoft Purview platform, responsible for protecting sensitive data, enabling regulatory compliance, and responding to data risks across the enterprise

• .
• The ideal candidate has deep practical experience with Microsoft Purview (formerly Microsoft 365 Compliance) and is comfortable working cross‑functionally with Security, IT, Legal, Compliance, and business stakeholders. This role requires both strategic design and day‑to‑day operational executio

• n.
• Job Dut

• ies
• Microsoft Purview Strategy & Implementa
• tionDesign, implement, and manage Microsoft Purview capabilities, includ
• ing:Microsoft Information Protection (MIP) – sensitivity labels, label policies, auto‑labeling, encryption, and rights manage
• mentData Loss Prevention (DLP) – policies for email, SharePoint, OneDrive, Teams, endpoints, and third‑party applicat
• ionsData Lifecycle Management & Records Management – retention labels, retention policies, and defensible disp
• osalInsider Risk Management – risk indicators, policies, alerts, and investigation workf
• lowseDiscovery & Audit – content searches, legal holds, audit log investigations, and evidence collec
• tionIntegrate Purview controls across Microsoft 365 workloads including Exchange Online, SharePoint Online, OneDrive, Teams, Defender, and hybrid environments where applic
• ableServe as the technical subject‑matter expert and platform owner for Microsoft Pur
• viewData Classification & Govern
• anceDevelop and maintain an enterprise data classification framework aligned with business needs and regulatory requirem
• entsPartner with business units to identify and protect sensitive data such as PII, PHI, financial data, and intellectual prop
• ertyImplement scalable data discovery using built‑in classifiers, trainable classifiers, and auto‑classification poli
• ciesEnsure data protection controls are effective while maintaining usability and business producti
• vityGenerative AI and Agentic AI Govern
• anceCompliance, Risk & Incident Resp
• onseTranslate regulatory requirements (GDPR, HIPAA, HITRUST and industry‑specific regulations) into enforceable technical cont
• rolsMonitor compliance posture using Microsoft Compliance Manager and recommend remediation act
• ionsInvestigate and respond to DLP incidents, insider risk alerts, and policy violat
• ionsSupport internal and external audits by producing audit logs, reports, and compliance evid
• enceCollaborate with Legal, Compliance, HR, and Security teams during investigations and regulatory inqui

• ries
• Automation & Operational Excel
• lenceUse PowerShell to automate Purview configuration, reporting, and operational
• tasksContinuously tune and improve policies to reduce false positives and improve signal qu
• alityDevelop documentation, runbooks, and operational procedures to support ongoing governance and incident res

• ponse
• Minimum Qualific
• ations7-10 years preferred work exper
• ience.5 years related work expe
• rienceHands‑on experience designing and managing Microsoft Purview in a production enterprise envir
• onmentExperience implementing and man
• aging:Sensitivity labels and encr
• yptionDLP policies across cloud, endpoint, and SaaS applic
• ationsRetention and records management po
• liciesInsider Risk Management and alert investig
• ationseDiscovery (Standard and/or Premium) and audit l

• ogging
• Preferred Qualifi
• cationsProficiency with PowerShell for automation and re
• portingExperience in highly regulated industries (e.g., healthcare, financial services, gove
• rnment)Experience integrating Purview with third‑party security or governanc
• e toolsPrior ownership of enterprise DLP or information protection p
• rogramsExperience implementing and managing DSPM

for AI