This job is closed
Applications are no longer available for this announcement. Explore current related opportunities below.
Job description
a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f5; }
Position Summary
We are seeking a Senior Information Protection & AI Governance Engineer to lead the strategy, engineering, and operational management of enterprise data protection, AI governance, and insider risk programs. This role will be instrumental in designing and optimizing Microsoft Purview capabilities, implementing governance controls for enterprise AI platforms, and enhancing insider risk detection to safeguard sensitive information while enabling responsible innovation.
The ideal candidate combines deep expertise in Microsoft security and compliance technologies with strong governance, risk, and security engineering experience. This individual will partner across security, compliance, legal, and business teams to balance data protection, regulatory requirements, user productivity, and secure AI adoption.
Key Responsibilities
Information Protection & Microsoft Purview Engineering
Design, implement, and optimize Microsoft Purview Information Protection, Data Loss Prevention (DLP), Information Governance, Data Lifecycle Management, and Compliance solutions.
Develop and maintain sensitivity labels, automated classification policies, data labeling strategies, and DLP controls.
Enhance enterprise data governance frameworks and ensure alignment with organizational compliance requirements.
Integrate Microsoft Purview with Microsoft 365, Azure, and other security and compliance platforms.
Continuously assess and improve data protection capabilities to reduce risk and strengthen governance.
AI Governance & Security Controls
Design and implement governance frameworks and security guardrails for Microsoft Copilot and other Generative AI platforms.
Develop controls that mitigate risks associated with data exposure, oversharing, prompt injection, and unauthorized AI usage.
Establish policies, monitoring capabilities, and governance processes that support responsible AI adoption.
Partner with business and technology stakeholders to enable secure AI innovation while maintaining regulatory and compliance standards.
Evaluate emerging AI governance technologies, trends, and best practices to strengthen enterprise AI security strategies.
Insider Risk Management & Threat Detection
Configure, manage, and optimize Microsoft Purview Insider Risk Management capabilities.
Develop and refine detection policies for insider threats, data exfiltration, policy violations, and anomalous user behavior.
Analyze insider risk alerts, improve detection accuracy, and enhance overall program effectiveness through continuous tuning.
Collaborate with Security Operations, Incident Response, Legal, Human Resources, and Compliance teams to investigate and address identified risks.
Leverage analytics and operational insights to reduce false positives and improve threat detection fidelity.
Security Engineering & Automation
Develop automation and operational efficiencies using PowerShell, Microsoft Graph API, KQL, and related technologies.
Build dashboards, metrics, and reporting solutions to measure compliance, information protection, and insider risk program effectiveness.
Create and maintain technical standards, engineering documentation, operational procedures, and support runbooks.
Contribute to continuous security improvement initiatives across the Microsoft security and compliance ecosystem.
Required Qualifications
Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Information Security, or a related field, or equivalent experience.
7+ years of experience in enterprise cybersecurity, information protection, compliance, or security engineering.
5+ years of hands-on experience implementing and administering Microsoft Purview.
Proven experience with: Microsoft Purview Information Protection
Data Loss Prevention (DLP)
Insider Risk Management
Communication Compliance
Data Classification and Sensitivity Labels
Information Governance
Experience implementing AI governance frameworks and security controls for enterprise AI platforms.
Strong understanding of insider threat detection, risk analytics, and policy optimization.
Experience working within the Microsoft 365 Security and Compliance ecosystem.
Hands-on experience with Microsoft Defender, Microsoft Entra ID, Microsoft Sentinel, and Microsoft Graph.
Strong analytical, problem-solving, and cross-functional collaboration skills.
Preferred Qualifications
Microsoft Certified: Information Protection Administrator Associate (SC-400)
Microsoft Certified: Cybersecurity Architect Expert (SC-100)
Microsoft Certified: Security Operations Analyst Associate (SC-200)
Microsoft Certified: Identity and Access Administrator Associate (SC-300)
CISSP, CISM, GIAC, or comparable industry certifications.
Experience governing and securing Microsoft Copilot and other AI-enabled workplace technologies.
Experience with Microsoft Defender XDR and advanced threat detection programs.
Experience supporting highly regulated industries or complex enterprise environments.
Familiarity with enterprise risk management, privacy, and compliance frameworks.
Technical Skills
Microsoft Purview
Microsoft Information Protection
Microsoft 365 Compliance
Data Loss Prevention (DLP)
Insider Risk Management
Communication Compliance
Data Classification & Governance
Microsoft Entra ID
Microsoft Sentinel
Microsoft Defender XDR
Microsoft Graph API
PowerShell
Azure Security & Compliance
AI Governance & Responsible AI
Generative AI Security
Information Governance & Data Protection
Equal Opportunity Employer, including disability and protected veteran status
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.