Data Security Team Lead

Job Summary

Data Security and Governance

• Design, implement, and optimize data security solutions using Microsoft Purview or other DLP and data governance tools.
• Develop and enforce DLP, Insider Risk Management, DSPM for AI, and CASB policies.
• Implement data classification and labeling strategies and define data retention policies.
• Deploy the AIP on-premises scanner and integrate CASB with on-premises firewalls.
• Lead implementation and configuration of Microsoft Priva and Microsoft Purview Data Map.
• Support DSPM initiatives by assessing risks, monitoring data flows, and optimizing security policies.
• Automate policy deployments using PowerShell, APIs, and Microsoft Security and Compliance tools.
• Deploy MDM, MAM, and Conditional Access policies.

Monitoring and Projects

• Monitor and respond to data security incidents and implement risk mitigation practices.
• Oversee security projects from initial scoping through post-deployment support.
• Develop HLDs and LLDs, assess customer environments, and create RFIs and IRLs as needed.
• Contribute to SOWs, project scoping, deliverables, and implementation roadmaps.

Leadership and Collaboration

• Supervise team members and collaborate with cross-functional teams, customers, and stakeholders.
• Deliver end-user and administrator workshops on data security, classification, governance, and compliance tools.
• Maintain implementation documentation, end-user guides, and administrative manuals.
• Maintain a technical test environment for internal testing and experimentation.

Education and Experience

• A bachelor's degree in computer science, information technology, cybersecurity, or a related field is required.
• At least four years of experience implementing data security, compliance, and governance solutions is required.
• At least two years of supervisory experience overseeing data protection and compliance initiatives is required.
• At least two years of hands-on Microsoft Purview experience is required.
• Experience with Microsoft Purview DLP, data classification, retention, CASB, Insider Risk Management, Records Management, eDiscovery, and Audit is required.
• Experience with GDPR, NCA, and ISO 27001 compliance requirements is required.

Technical Qualifications

• Experience with Microsoft Purview Information Protection across Teams, SharePoint, OneDrive, and Exchange Online is required.
• Strong understanding of Microsoft Information Protection for labeling, encryption, and rights management is required.
• Knowledge of Microsoft Defender for Cloud Apps is required.
• Knowledge of Microsoft Intune, MDM, MAM, and Conditional Access is preferred.
• Strong leadership, project management, communication, analytical, and problem-solving abilities are required.

Certifications

• GIAC Certified Data Protection or an equivalent certification is required.
• Vendor certifications in DLP, data classification, litigation holds, or governance tools are required.
• Microsoft Certified Information Protection Administrator Associate SC-400 and Cybersecurity Architect Expert SC-100 are preferred.

Compliance and Quality