Data Protection Analyst (MIP/Purview Specialist)

Role Summary

Client is seeking a Data Protection Analyst to manage and optimize our Microsoft Information Protection (MIP) environment. You will be responsible for the day-to-day health of our data labeling services, ensuring that sensitivity policies are correctly applied across Outlook, SharePoint, Teams, and Endpoints. Beyond operational support, you will play a key role in shaping Client's global Data Protection Governance framework, helping define how the firm classifies and secures its most critical information assets.

Key Responsibilities

1. L1 Steady-State Operations & Support

• Platform Health: Conduct routine monitoring of the MIP dashboard to ensure maximum uptime and platform stability.
• Incident Management: Act as the first point of contact (L1) for MIP-related issues. Create, track, and manage tickets through to resolution or escalation to L2/L3 teams.
• Troubleshooting: Resolve basic connectivity and labeling anomalies following established Standard Operating Procedures (SOPs).

2. Policy Configuration & Implementation

• Labeling Strategy: Assist stakeholders in developing and configuring sensitivity labels (Manual, Suggested, and Automatic) based on content inspection and the firm's classification schema.
• M365 Integration: Support the seamless integration of MIP capabilities across the Microsoft stack (Outlook, OneDrive, Teams) and physical endpoint devices.
• Testing: Lead pilot testing and policy fine-tuning in collaboration with business units to ensure security controls do not disrupt legitimate workflows.

3. Event Monitoring & Analysis

• Triage: Monitor alerts and notifications generated by the platform; perform contextual analysis of metadata to identify true security risks.
• Continuous Improvement: Identify recurring false positives or alert patterns and provide formal recommendations to the L2 engineering teams for policy optimization.
• SLA Compliance: Ensure all security events are processed and closed within defined Service Level Agreements (SLAs).

4. Governance & Framework Development

• Framework Design: Assist in designing an enterprise-wide Data Protection Governance framework and operating models that align with global financial regulations.
• RACI Management: Help define clear roles and responsibilities (RACI matrices) across Business, IT, Security, and Compliance departments.
• Documentation: Author and update SOPs, operational updates, and incident summaries to maintain high compliance standards.

Required Technical Skills & Qualifications

• Primary Toolset: Hands-on experience with Microsoft Purview / Microsoft Information Protection (MIP).
• M365 Ecosystem: Strong understanding of Microsoft 365 administration, specifically how sensitivity labels interact with Exchange Online and SharePoint.
• Data Classification: Familiarity with Data Loss Prevention (DLP) concepts and data classification methodologies.
• Ticketing & ITSM: Proficiency in enterprise ticketing systems (e.g., ServiceNow, Jira).
• Analytical Skills: Ability to perform "contextual analysis"looking at metadata to understand why a file was flagged or labeled.

Preferred Behavioral Competencies

• Collaboration: Ability to work across "Silos" (connecting with IT, Compliance, and Business users).
• Communication: Capable of translating complex regulatory requirements into simple labeling instructions for end-users.
• Detail Oriented: High level of accuracy when managing data sensitivity rules where a single error can impact thousands of users.

Success Metrics

• Operational Stability: Maintaining platform availability and connectivity.
• Policy Accuracy: Successful reduction of false-positive alerts through continuous rule tuning.
• Compliance Alignment: Delivery of a robust RACI and Governance framework that satisfies internal audit and external regulators.