Position Summary We are seeking a Senior Information Protection & AI Governance Engineer to lead the strategy, engineering, and operational management of enterprise data protection, AI governance, and insider risk programs. This role will be instrumental in designing and optimizing Microsoft Purview capabilities, implementing governance controls for enterprise AI platforms, and enhancing insider risk detection to safeguard sensitive information while enabling responsible innovation.
The ideal candidate combines deep expertise in Microsoft security and compliance technologies with strong governance, risk, and security engineering experience. This individual will partner across security, compliance, legal, and business teams to balance data protection, regulatory requirements, user productivity, and secure AI adoption.
Key Responsibilities Information Protection & Microsoft Purview Engineering - Design, implement, and optimize Microsoft Purview Information Protection, Data Loss Prevention (DLP), Information Governance, Data Lifecycle Management, and Compliance solutions.
- Develop and maintain sensitivity labels, automated classification policies, data labeling strategies, and DLP controls.
- Enhance enterprise data governance frameworks and ensure alignment with organizational compliance requirements.
- Integrate Microsoft Purview with Microsoft 365, Azure, and other security and compliance platforms.
- Continuously assess and improve data protection capabilities to reduce risk and strengthen governance.
AI Governance & Security Controls - Design and implement governance frameworks and security guardrails for Microsoft Copilot and other Generative AI platforms.
- Develop controls that mitigate risks associated with data exposure, oversharing, prompt injection, and unauthorized AI usage.
- Establish policies, monitoring capabilities, and governance processes that support responsible AI adoption.
- Partner with business and technology stakeholders to enable secure AI innovation while maintaining regulatory and compliance standards.
- Evaluate emerging AI governance technologies, trends, and best practices to strengthen enterprise AI security strategies.
Insider Risk Management & Threat Detection - Configure, manage, and optimize Microsoft Purview Insider Risk Management capabilities.
- Develop and refine detection policies for insider threats, data exfiltration, policy violations, and anomalous user behavior.
- Analyze insider risk alerts, improve detection accuracy, and enhance overall program effectiveness through continuous tuning.
- Collaborate with Security Operations, Incident Response, Legal, Human Resources, and Compliance teams to investigate and address identified risks.
- Leverage analytics and operational insights to reduce false positives and improve threat detection fidelity.
Security Engineering & Automation - Develop automation and operational efficiencies using PowerShell, Microsoft Graph API, KQL, and related technologies.
- Build dashboards, metrics, and reporting solutions to measure compliance, information protection, and insider risk program effectiveness.
- Create and maintain technical standards, engineering documentation, operational procedures, and support runbooks.
- Contribute to continuous security improvement initiatives across the Microsoft security and compliance ecosystem.
Required Qualifications - Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Information Security, or a related field, or equivalent experience.
- 7+ years of experience in enterprise cybersecurity, information protection, compliance, or security engineering.
- 5+ years of hands-on experience implementing and administering Microsoft Purview.
- Proven experience with:
- Microsoft Purview Information Protection
- Data Loss Prevention (DLP)
- Insider Risk Management
- Communication Compliance
- Data Classification and Sensitivity Labels
- Information Governance
- Experience implementing AI governance frameworks and security controls for enterprise AI platforms.
- Strong understanding of insider threat detection, risk analytics, and policy optimization.
- Experience working within the Microsoft 365 Security and Compliance ecosystem.
- Hands-on experience with Microsoft Defender, Microsoft Entra ID, Microsoft Sentinel, and Microsoft Graph.
- Strong analytical, problem-solving, and cross-functional collaboration skills.
Preferred Qualifications - Microsoft Certified: Information Protection Administrator Associate (SC-400)
- Microsoft Certified: Cybersecurity Architect Expert (SC-100)
- Microsoft Certified: Security Operations Analyst Associate (SC-200)
- Microsoft Certified: Identity and Access Administrator Associate (SC-300)
- CISSP, CISM, GIAC, or comparable industry certifications.
- Experience governing and securing Microsoft Copilot and other AI-enabled workplace technologies.
- Experience with Microsoft Defender XDR and advanced threat detection programs.
- Experience supporting highly regulated industries or complex enterprise environments.
- Familiarity with enterprise risk management, privacy, and compliance frameworks.
Technical Skills - Microsoft Purview
- Microsoft Information Protection
- Microsoft 365 Compliance
- Data Loss Prevention (DLP)
- Insider Risk Management
- Communication Compliance
- Data Classification & Governance
- Microsoft Entra ID
- Microsoft Sentinel
- Microsoft Defender XDR
- Microsoft Graph API
- PowerShell
- Azure Security & Compliance
- AI Governance & Responsible AI
- Generative AI Security
- Information Governance & Data Protection
