Senior Microsoft Purview Specialist / Data Security Engineer

About the role

An internal Information Security / IT team is looking for an experienced Microsoft Purview Specialist to own the design, implementation and ongoing management of its data protection and compliance posture. The role centres on Information Protection (MIP), Data Loss Prevention (DLP) and Information Rights Management (IRM), with working knowledge of the wider Purview suite.

Key responsibilities

• Own the end-to-end lifecycle of the Microsoft Purview environment: configuration, policy tuning, monitoring and continuous improvement.
• Design and maintain sensitivity label taxonomies, auto-labeling policies and MIP configurations aligned to internal data classification standards.
• Build, monitor and refine DLP policies across Exchange, SharePoint, OneDrive, Teams and endpoints (Windows/macOS) to prevent data leakage.
• Manage IRM/RMS templates and encryption policies to protect sensitive content in motion and at rest.
• Administer related Purview capabilities as needed: Data Lifecycle Management, Records Management, Insider Risk Management, Communication Compliance, eDiscovery and Audit.
• Maintain and refine sensitive information types (SITs) and trainable classifiers, and investigate and respond to DLP and insider risk alerts.
• Align Purview configurations with compliance obligations such as UAE PDPL, GDPR and ISO 27001, and keep documentation including policy matrices, configuration standards and runbooks.
• Work with IT, legal and compliance teams, train internal stakeholders, and liaise with Microsoft support and external vendors when needed.

Required profile

• 5+ years of experience in Microsoft security and compliance, with a strong focus on Microsoft Purview.
• Hands-on expertise in MIP, DLP and IRM, and working knowledge of the other Purview components listed above.
• Solid understanding of Microsoft 365 architecture (Exchange Online, SharePoint Online, Teams, OneDrive).
• Familiarity with data classification frameworks and regional compliance regulations; relevant certifications such as SC-400, SC-401 or SC-100 preferred.

Required skills

• Microsoft Purview (MIP, DLP, IRM, Data Lifecycle Management, Records Management, Insider Risk Management, eDiscovery, Compliance Manager, Audit)
• PowerShell for Purview and Security & Compliance administration
• Data classification frameworks and compliance regulations