Note: The job is a remote job and is open to candidates in USA. Swoon is partnering with a major U.S. airline to hire a Data Loss Prevention Analyst supporting its enterprise Data Protection team. The role focuses on Microsoft Purview DLP policy operations, exception governance, risk assessment, and continuous improvement across Microsoft 365.
Responsibilities
- Configure, test, troubleshoot, and tune Microsoft Purview DLP policies across Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams
- Manage the full lifecycle of DLP exceptions, from initial intake and risk assessment through business justification, approvals, compensating controls, documentation, expiration tracking, recertification, and closure
- Investigate DLP alerts, false positives, and user-reported issues to determine whether the underlying problem requires a policy adjustment, technical remediation, or a formal business exception
- Support sensitivity labeling and auto-labeling initiatives, including policy testing, validation, and rollout activities
- Partner with security, compliance, IT, and business stakeholders to evaluate risks, coordinate approvals, and implement practical solutions that protect sensitive information without unnecessarily disrupting business operations
- Analyze recurring exceptions and control gaps to identify opportunities for policy improvements, process changes, and stronger preventive controls
- Maintain exception records, control-health metrics, runbooks, and supporting documentation to ensure security decisions are traceable and audit-ready
Skills
- Hands-on experience with Microsoft Purview Data Loss Prevention (DLP) , including creating, configuring, testing, tuning, and supporting the deployment of policies in an enterprise environment
- Experience working with DLP controls across Microsoft 365 workloads, including Exchange, SharePoint, OneDrive, and Teams
- Direct experience managing security-control exceptions end to end , including risk assessments, approval workflows, business justifications, compensating controls, expiration management, and periodic reviews
- Familiarity with Microsoft Purview sensitivity labeling, auto-labeling, and information classification
- Strong troubleshooting and analytical skills, with experience investigating policy behavior, identifying root causes, reducing false positives, and validating corrective actions
- Experience balancing technical implementation with day-to-day operational responsibilities, including security alerts, incidents, support tickets, and ongoing policy maintenance
- The ability to communicate effectively with both technical and nontechnical stakeholders, particularly when explaining security risks, control behavior, and business exceptions
- Midlevel to senior individual contributors who are still actively working with DLP technologies and security controls
- Someone who can work directly in Microsoft Purview, troubleshoot policies, and independently manage the operational and risk-management responsibilities that come with enterprise DLP
- General Microsoft 365 administration, SOC monitoring, or compliance auditing experience alone will not be sufficient without hands-on Purview DLP and exception governance experience
- Experience using ServiceNow for security exceptions and approval workflows, developing DLP control-health metrics, or supporting data protection programs within large, regulated enterprise environments
Benefits
- Fully remote
Company Overview
Company H1B Sponsorship