Senior Microsoft Purview Specialist

Role Overview

Responsibilities

• Own Microsoft Purview configuration, policy tuning, monitoring, and continuous improvement.
• Design and maintain sensitivity label taxonomies, auto-labeling policies, and MIP configurations.
• Build and refine DLP policies across Exchange, SharePoint, OneDrive, Teams, and Windows and macOS endpoints.
• Manage IRM/RMS templates and encryption policies for content in motion and at rest.
• Administer Data Lifecycle Management, Records Management, Insider Risk Management, Communication Compliance, eDiscovery, and Audit capabilities.
• Maintain sensitive information types and trainable classifiers.
• Investigate DLP and insider risk alerts and tune policies to reduce false positives and false negatives.
• Align Purview configurations with UAE PDPL, GDPR, ISO 27001, and industry-specific regulations.
• Maintain policy matrices, configuration standards, and operational runbooks.
• Collaborate with IT, legal, and compliance teams on data protection controls.
• Provide stakeholder guidance and training on data classification and handling policies.
• Liaise with Microsoft support and external partners or vendors for escalations and advisory support.

Required Skills and Experience

• At least 5 years of experience in Microsoft security and compliance, focused on Microsoft Purview.
• Deep hands-on expertise with MIP sensitivity labels, label policies, auto-labeling, and encryption.
• Experience with DLP policy design across workloads and endpoints, exact data match, and document fingerprinting.
• Experience with IRM/RMS templates, super user configuration, and protection tracking.
• Working knowledge of related Purview components, including Data Lifecycle Management, Records Management, Insider Risk Management, Communication Compliance, eDiscovery, Compliance Manager, and Audit.
• Solid understanding of Microsoft 365 architecture, including Exchange Online, SharePoint Online, Teams, and OneDrive.
• Familiarity with PowerShell for Purview and Security & Compliance administration.
• Understanding of data classification frameworks and applicable regional compliance regulations.
• Relevant certifications such as SC-400, SC-401, or SC-100 are preferred.