Role: Microsoft Purview & Data Loss Prevention (DLP) Specialist
Location: Los Angeles, CA
Position Summary
We are seeking an experienced Microsoft Purview & Data Loss Prevention (DLP) Specialist to support enterprise-wide data protection, information governance, and compliance initiatives. The ideal candidate will have deep hands-on expertise in Microsoft Purview, Microsoft 365 Security & Compliance, and enterprise DLP implementations across cloud, endpoint, collaboration, and messaging platforms.
This role is responsible for designing, implementing, administering, and optimizing Microsoft Purview solutions to protect sensitive organizational data, enforce governance policies, and ensure compliance with regulatory and security standards. The successful candidate will collaborate closely with Cybersecurity, Infrastructure, Compliance, Legal, and Business stakeholders to strengthen the organization's overall security posture.
Key Responsibilities
- Design, implement, and maintain enterprise Data Loss Prevention (DLP) policies across endpoints, Microsoft 365 services, cloud applications, and messaging platforms.
- Configure and administer Microsoft Purview capabilities, including:
- Data Loss Prevention (DLP)
- Microsoft Information Protection
- Sensitivity Labels
- Data Classification & Labeling
- Retention Labels & Retention Policies
- Insider Risk Management
- eDiscovery (Standard & Premium)
- Information Governance
- Develop and maintain enterprise-wide data classification, labeling, and retention strategies.
- Monitor, investigate, analyze, and remediate DLP alerts, policy violations, and security incidents.
- Implement and optimize DLP controls across Microsoft 365 services including:
- Exchange Online
- SharePoint Online
- OneDrive for Business
- Microsoft Teams
- Conduct enterprise data discovery, data mapping, and sensitive data identification exercises.
- Perform risk assessments to identify data exposure and recommend appropriate security controls.
- Partner with cybersecurity teams to align DLP and Purview implementations with Zero Trust architecture and security best practices.
- Support regulatory compliance initiatives and security programs aligned with NIST, ISO 27001, and other governance frameworks.
- Create dashboards, reports, and metrics to measure data protection effectiveness and compliance posture.
- Perform policy tuning and optimization to reduce false positives while improving detection accuracy.
- Support internal and external audits, compliance assessments, and remediation activities.
- Develop technical documentation, operational procedures, governance standards, and implementation guides.
- Deliver end-user awareness and training sessions related to data protection, compliance, and information governance.
- Collaborate with security operations, infrastructure, legal, and compliance teams to improve enterprise data security.
Required Qualifications
- 7+ years of experience in Information Security, Microsoft Security, or Data Protection.
- Proven experience designing and implementing enterprise Data Loss Prevention (DLP) solutions.
- Strong hands-on experience with Microsoft Purview and Microsoft 365 Security & Compliance.
- Experience implementing Information Protection, Sensitivity Labels, and Data Classification.
- Hands-on expertise with Retention Policies, Records Management, and Information Governance.
- Experience managing DLP incidents, investigations, remediation, and policy enforcement.
- Strong understanding of Microsoft 365 services, including:
- Exchange Online
- SharePoint Online
- OneDrive
- Microsoft Teams
- Experience with cloud security, SaaS security, and Microsoft security technologies.
- Knowledge of Microsoft Defender security ecosystem is preferred.
- Strong understanding of Zero Trust security principles.
- Experience supporting regulatory compliance initiatives.
- Familiarity with NIST, ISO 27001, CIS Controls, and related security frameworks.
- Strong analytical, troubleshooting, and problem-solving skills.
- Excellent communication, documentation, and stakeholder management abilities.
- Ability to work independently while collaborating effectively across technical and business teams.
Preferred Qualifications
- Microsoft Certified: Information Protection Administrator Associate (SC-400)
- Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
- CISSP (Certified Information Systems Security Professional)
- Microsoft Security, Compliance, Azure Security, or related cloud security certifications.
- Experience supporting enterprise compliance, governance, and audit programs.
Technical Skills
- Microsoft Purview
- Microsoft 365 Security & Compliance Center
- Data Loss Prevention (DLP)
- Microsoft Information Protection (MIP)
- Sensitivity Labels
- Data Classification
- Information Governance
- Retention Labels & Policies
- Insider Risk Management
- eDiscovery
- Microsoft Defender
- Exchange Online
- SharePoint Online
- OneDrive for Business
- Microsoft Teams
- Microsoft Entra ID (Azure AD)
- Cloud Security
- Zero Trust Architecture
- NIST
- ISO 27001
- Risk Assessment
- Compliance & Governance
Preferred Industry Experience
- Enterprise IT
- Financial Services
- Healthcare
- Government
- Technology
- Large Enterprise Microsoft 365 Environments
Never miss an opportunity! Create an alert based on the job you applied for.