Note: The job is a remote job and is open to candidates in USA. ivision is a Microsoft Solutions Partner delivering consulting and managed services across Modern Work, Cloud & AI, Security, and Enterprise Infrastructure. The company is seeking a Senior Consultant to lead Microsoft Purview data security and governance engagements, including assessments, information protection, DLP, compliance, Copilot readiness, and tenant consolidations. The role also includes client deliverables, pre-sales support, knowledge transfer, and mentoring consultants.
Responsibilities
- Lead **data security governance discovery** — classification taxonomy, sensitive information types, data handling requirements, and control frameworks across the data lifecycle (creation, storage, use, transmission, archival, deletion)
- Design and deploy **Microsoft Purview Information Protection** — sensitivity label taxonomy, sub-labels, label publishing policies, encryption and rights management settings, content marking, and auto-labeling
- Design and deploy **Data Loss Prevention** across Exchange Online, SharePoint Online, OneDrive for Business, and Teams — policy and rule authoring, sensitive info type and confidence tuning, policy tips, incident reporting, and staged promotion from simulation to audit to block-with-override
- Implement **Endpoint DLP** where device onboarding to Microsoft Defender for Endpoint, OS, and telemetry prerequisites are in place
- Configure **Insider Risk Management** — global settings, indicator and threshold tuning, role groups, triage workflow, and privacy considerations
- Deliver **Data Lifecycle and Records Management** — retention labels and policies, disposition review, and records configuration planning
- Execute **DSPM and AI data readiness** work — oversharing and permissions-hygiene analysis, sensitive data exposure review, SharePoint Restricted Content Discovery / Restricted Access Control, and guardrails that make Microsoft 365 Copilot rollout defensible
- Run **current-state Purview assessments** — policy deployment health, false-positive analysis, classifier and confidence-level evaluation, adaptive scope drift, and administrative role review — producing prioritized, risk-ranked remediation plans
- Deliver **Purview tenant-to-tenant consolidations** — inventory source configuration, perform gap analysis, map policies and labels to the target tenant, and validate functional parity post-migration
- Produce **client-ready deliverables**: Summary of Findings, Purview Design Report, Implementation Roadmap, As-Built documentation, and executive readouts
- Lead **knowledge transfer and adoption enablement** — administrator sessions, user orientation, how-to guides, and communication assets
- Support **pre-sales activities**: scoping calls, LOE estimation, SOW contribution, and technical responses for assessment, POV, implementation, and Copilot-readiness opportunities
- Mentor mid- and junior-level consultants and contribute to ivision's **service catalog, scoping toolkits, and delivery standardization** efforts
Skills
- 6+ years of hands-on experience delivering data security, compliance, or information governance solutions on Microsoft 365, with deep focus on Microsoft Purview
- Deep practical experience with:
- Microsoft Purview Information Protection — sensitivity labels, label policies, auto-labeling, encryption, and rights management
- Data Loss Prevention — M365 workload policies, custom and template rule sets, sensitive information types, trainable classifiers, and policy tuning to reduce false positives
- Endpoint DLP — Defender for Endpoint onboarding dependencies, device policy scoping, and staged enforcement
- Insider Risk Management — policy scope, indicators, role groups, and case triage design
- Data Lifecycle / Records Management — retention policies, retention labels, and disposition
- Microsoft Purview eDiscovery (current portal experience) — cases, searches, holds, review sets, and export
- Microsoft 365 platform fluency — Exchange Online, SharePoint Online, OneDrive for Business, Teams, and Entra ID, including permissions and external sharing models
- Licensing fluency — E3 vs. E5 / E5 Compliance entitlements, Purview add-ons, SharePoint Advanced Management, and Entra ID Governance prerequisites
- PowerShell and Microsoft Graph for Purview and Security & Compliance administration and reporting
- Demonstrated ability to lead a workstream independently, manage client stakeholders across IT, security, legal, compliance, and business functions, and produce client-ready design documentation
- Experience contributing to SOWs, scoping toolkits, and LOE estimation for data security and governance engagements
- Strong consultative communication skills with technical and business audiences
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent experience
- SC-401 or SC-400 — Information Security Administrator Associate
- SC-100 — Microsoft Cybersecurity Architect Expert
- SC-200 — Security Operations Analyst Associate (preferred for Insider Risk / alert-triage-heavy engagements)
- MS-102 — Microsoft 365 Administrator Expert
- AZ-500 — Azure Security Engineer Associate (preferred for engagements extending Purview beyond M365)
- Familiarity with ITIL, agile delivery, and PMP practices is a plus
- Working knowledge of regulatory frameworks (HIPAA, PCI-DSS, GDPR, CMMC) and maturity models such as the Microsoft 365 Maturity Model and the CISA Zero Trust data pillar is a plus
- Collaborative mindset; thrives in a geographically distributed delivery team and is comfortable mentoring junior engineers
Benefits
- Remote-friendly for the right candidate
Company Overview