Data Loss Prevention (DLP) Analyst | Microsoft Purview, Security Exceptions & Information Protection
Pay:
$65-80/hr W2
Contract:
Contract
Duration:
6 months, with potential for extension
Schedule:
Fully remote | Standard Central Time business hours
Location:
United States (approved locations)
If you've worked hands-on with Microsoft Purview DLP and understand that effective data protection involves more than just configuring security policies, this role may be a great fit.
Swoon is partnering with a major U.S. airline to bring on a Data Loss Prevention (DLP) Analyst to support its enterprise Data Protection team.
The team is focused on strengthening how sensitive information is protected across Microsoft 365, with particular emphasis on
DLP exception governance, policy tuning, and continuous improvement
.
This is a hands-on role that sits at the intersection of technical security operations and risk management. You'll help ensure DLP policies are working as intended while managing situations where legitimate business needs require exceptions to those controls.
Rather than simply responding to individual alerts or requests, you'll also help identify recurring issues, improve existing policies, and build more consistent processes for managing exceptions across the organization.
What you'll get to work on:
Configure, test, troubleshoot, and tune Microsoft Purview DLP policies across Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams.
Manage the full lifecycle of DLP exceptions, from initial intake and risk assessment through business justification, approvals, compensating controls, documentation, expiration tracking, recertification, and closure.
Investigate DLP alerts, false positives, and user-reported issues to determine whether the underlying problem requires a policy adjustment, technical remediation, or a formal business exception.
Support sensitivity labeling and auto-labeling initiatives, including policy testing, validation, and rollout activities.
Partner with security, compliance, IT, and business stakeholders to evaluate risks, coordinate approvals, and implement practical solutions that protect sensitive information without unnecessarily disrupting business operations.
Analyze recurring exceptions and control gaps to identify opportunities for policy improvements, process changes, and stronger preventive controls.
Maintain exception records, control-health metrics, runbooks, and supporting documentation to ensure security decisions are traceable and audit-ready.
You'll be a strong fit if you have:
• Hands-on experience with
Microsoft Purview Data Loss Prevention (DLP)
, including creating, configuring, testing, tuning, and supporting the deployment of policies in an enterprise environment.
Experience working with DLP controls across Microsoft 365 workloads, including Exchange, SharePoint, OneDrive, and Teams.
• Direct experience managing
security-control exceptions end to end
, including risk assessments, approval workflows, business justifications, compensating controls, expiration management, and periodic reviews.
Familiarity with Microsoft Purview sensitivity labeling, auto-labeling, and information classification.
Strong troubleshooting and analytical skills, with experience investigating policy behavior, identifying root causes, reducing false positives, and validating corrective actions.
Experience balancing technical implementation with day-to-day operational responsibilities, including security alerts, incidents, support tickets, and ongoing policy maintenance.
The ability to communicate effectively with both technical and nontechnical stakeholders, particularly when explaining security risks, control behavior, and business exceptions.
Nice to have:
Experience using ServiceNow for security exceptions and approval workflows, developing DLP control-health metrics, or supporting data protection programs within large, regulated enterprise environments.
A note on the ideal background:
We're particularly interested in midlevel to senior individual contributors who are still actively working with DLP technologies and security controls.
This is not primarily a security architecture, people management, or high-level governance position. The team needs someone who can work directly in Microsoft Purview, troubleshoot policies, and independently manage the operational and risk-management responsibilities that come with enterprise DLP.
Similarly, general Microsoft 365 administration, SOC monitoring, or compliance auditing experience alone will not be sufficient without hands-on Purview DLP and exception governance experience.
If your background combines technical Microsoft Purview expertise with practical DLP exception management, we encourage you to apply!