Data Security Consultant

Job Title:  Data Security Consultant

Location: Remote

Mode: Contract  - Onsite

The Data Security Consultant will support Data Protection & Data Governance program to plan and execute the safe data exception migration and Microsoft sensitivity labeling for existing files and email content being transferred to NewCo. The consultant will provide hands‑on configuration guidance, cross‑team coordination, documentation, and operational readiness deliverables to ensure controlled, auditable, and compliant transfer and labeling of sensitive assets.

The consultant will perform the following activities:

• Review and update the existing SOW, roadmap, and detailed project plan; document and communicate any scope or schedule changes.
• Kick off and coordinate separation and transfer activities related to Microsoft sensitivity labeling and associated enforcement policies.
• Identify, copy, and catalogue Safe Data Program artifacts (SOPs, knowledge articles, ITForMe content) required for NewCo operations.
• Work with IAM to create/configure Safe Data exception groups for USB, fileshare, and webmail use cases in NewCo.
• Coordinate with ServiceNow to replicate and automate exception intake (individual and bulk), and integrate the intake process with IAM workflows.
• Produce a Safe Data Exception inventory that identifies in‑scope users and maps migration needs for USB, fileshare, and webmail exceptions.
• Collaborate with Security Engineering and End User Services (EUS) to define the recommended methodology for configuring and migrating Microsoft sensitivity labels and enforcement policies (subject to Microsoft technical decisions).
• Deliver detailed project artifacts: workstream project plans, timelines, storyboards, step‑by‑step runbooks, FAQs, and training materials for operational teams.
• Produce regular status reporting (monthly and quarterly), capture stakeholder feedback, and highlight milestones, risks, issues, and opportunities.
• Provide ongoing Data Security consultation and subject‑matter expert support throughout the engagement.

Key Deliverables

• Updated SOW, roadmap, and change log.
• Kickoff briefing and separation/transfer plan for sensitivity labeling.
• Catalog of Safe Data Program artifacts (SOPs, knowledge articles, ITForMe).
• Configured IAM exception groups and documented configuration steps.
• ServiceNow exception intake design and automation specification, with IAM integration.
• Safe Data Exception inventory (CSV/recorded dataset) with migration recommendations.
• Technical approach and recommendation for Microsoft sensitivity label configuration and policy enforcement.
• Workstream project plans, timelines, storyboards, runbooks, training deck, and user FAQs.
• Monthly and quarterly status reports and a final engagement closeout report.

Qualifications

• Bachelor’s degree in IT, Cybersecurity, Privacy, Law, or a related field, or equivalent practical experience.
• Strong experience in data protection, privacy, or security, with hands‑on experience in secured data protection and sensitivity labeling.
• Practical experience with Microsoft sensitivity labeling technologies (e.g., MS Purview) and endpoint/data protection tooling.
• Strong analytical skills and clear written and verbal communication.
• Demonstrated ability to work across IAM, ServiceNow, Security Engineering, and EUS teams.
• Knowledge of regional data protection considerations relevant to the project.
• Commitment to confidentiality and adherence to NDAs.