Data Security Specialist

New Value Solutions, a national IT consulting company, is seeking a Data Security Specialist with deep expertise in Microsoft Purview, Data Security Posture Management (DSPM), and Data Loss Prevention (DLP) to support enterprise data governance and security initiatives. This role will be responsible for designing, implementing, and operationalizing Microsoft Purview security capabilities, helping organizations identify and mitigate data risks, strengthen compliance controls, and improve overall data security posture. The successful candidate will work closely with security, identity, compliance, and data teams to implement scalable data protection solutions across Microsoft 365 environments while optimizing governance, monitoring, and policy enforcement practices.

Responsibilities:

• Lead the end-to-end deployment and operationalization of Data Security Posture Management (DSPM) capabilities within Microsoft Purview.

• Configure and manage data discovery, data classification, Sensitive Information Types (SITs), trainable classifiers, and data risk dashboards.

• Identify data exposure risks and develop remediation strategies to improve organizational data security posture.

• Design, implement, and manage Data Loss Prevention (DLP) policies across Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, and endpoint devices.

• Configure DLP policy rules, conditions, exceptions, adaptive protection controls, contextual policies, and endpoint DLP integrations.

• Monitor DLP alerts, tune policy effectiveness, investigate issues, and reduce false positives.

• Implement and manage Microsoft Purview Information Protection capabilities including sensitivity labels, auto-labeling, and data classification controls.

• Configure and maintain Data Lifecycle Management solutions including retention policies and retention labels.

• Support Insider Risk Management and Communication Compliance initiatives where required.

• Integrate DSPM insights into broader enterprise data governance, compliance, and cybersecurity programs.

• Assess and recommend optimal use of Microsoft 365 E3, E5, E5 Compliance, and E5 Security licensing capabilities.

• Map Microsoft security and compliance features to licensing requirements and business needs.

• Provide technical leadership and guidance on Microsoft Purview solutions including DSPM, DLP, Insider Risk Management, eDiscovery, and Information Protection.

• Collaborate with security, identity, and data teams to integrate Microsoft Purview with Entra ID (Azure AD), Microsoft Defender, endpoint security solutions, and cloud applications.

• Support advanced configurations, API integrations, and automation initiatives where required.

• Develop dashboards, reporting frameworks, and metrics related to data risk posture, policy effectiveness, compliance, and governance.

• Continuously assess and optimize DSPM and DLP configurations to improve security outcomes and operational efficiency.

• Document configurations, standards, processes, and best practices related to enterprise data protection and governance.

Requirements:

• 5+ years of experience in data security, information protection, cybersecurity, or enterprise security engineering roles.

• Extensive hands-on experience implementing and managing Microsoft Purview solutions.

• Strong experience deploying and operationalizing Data Security Posture Management (DSPM) capabilities.

• Strong experience designing, implementing, and supporting Data Loss Prevention (DLP) solutions.

• Experience configuring and managing Sensitive Information Types (SITs), trainable classifiers, and data classification frameworks.

• Experience implementing DLP policies across Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, and endpoint devices.

• Strong understanding of Microsoft Information Protection including sensitivity labels, auto-labeling, and data classification controls.

• Experience implementing and managing Data Lifecycle Management, retention policies, and retention labels.

• Knowledge of Insider Risk Management, Communication Compliance, eDiscovery, and related Microsoft Purview capabilities.

• Strong understanding of Microsoft 365 E3, E5, E5 Compliance, and E5 Security licensing models and feature enablement.

• Experience integrating Microsoft Purview with Entra ID (Azure AD), Microsoft Defender, endpoint security platforms, and cloud applications.

• Experience developing dashboards, compliance reporting, security metrics, and data governance reporting frameworks.

• Strong knowledge of enterprise data governance, regulatory compliance, information security, and risk management principles.

• Experience supporting API integrations, automation, and advanced Microsoft security configurations.

• Strong troubleshooting, analytical, and problem-solving skills.

• Excellent communication and stakeholder engagement skills.

• Relevant Microsoft security, compliance, or cloud certifications are considered an ass