Lead M365 Purview Engineer (Data Security & Compliance )

Hiring Alert | Lead M365 Purview Engineer (Data Security & Compliance)

Location: Bangalore
Experience: 6-9 Years in IT/Cybersecurity
Focus Areas: Information Protection (AIP/MIP), Data Loss Prevention (DLP), Insider Risk

Role Overview
We are seeking a seasoned Lead M365 Security Engineer to architect, deploy, and manage our M365 data protection ecosystem. This role will serve as the technical authority on how we classify, label, and protect sensitive information across the M365 stack & extended services. The position bridges the gap between high-level compliance requirements and technical enforcement, ensuring our data remains secure in a cloud-first environment.

Key Responsibilities

• Architecture & Strategy: Design and implement a global Microsoft Purview (formerly Compliance Center) strategy, focusing on the integration of Information Protection and DLP across Exchange, SharePoint, OneDrive, Teams, Endpoints & supported services.
• Information Protection (AIP/MIP): Develop, configure & manage sensitivity label schemas, auto-labeling policies & all relevant Information Protection configurations across portals & CLI [Admin].
• Data Loss Prevention (DLP): Engineer complex DLP policies to prevent unauthorized exfiltration of PII, PHI, and IP while balancing security with user productivity.
• Policy Governance: Collaborate with Legal, HR, and Risk teams to translate business intent” into technical “controls.”
• Discovery & Response: Manage eDiscovery (Standard/Premium) workflows and oversee Insider Risk Management alerts to identify high-risk user behaviors.
• Mentorship: Act as the Tier 3 escalation point for security incidents and mentor junior engineers on the nuances of the M365 security landscape.

Required Technical Skills

Core M365 Security

• Microsoft Purview Information Protection
• Purview Message Encryption (PME)
• DLP

Governance

• Records Management
• Retention Policies
• Data Lifecycle Management

Identity & Access

• Entra ID (Azure AD)
• Conditional Access
• Privileged Identity Management (PIM)

Automation

• Advanced PowerShell scripting for bulk policy deployment and reporting

Cloud Ecosystem

• Integration of M365 security logs with Microsoft Sentinel or third-party SIEMs

Qualifications

• 6–9 years of experience in infrastructure or security, with at least 4+ years focused exclusively on the M365 security suite.
• Proven track record of migrating legacy “on-prem” data protection mindsets to modern, identity-driven cloud security.
• Preferred Certifications:
  SC-100 (Cybersecurity Architect)
  SC-400 (Administering Information Protection)
  SC-401 (Administering Information Security in Microsoft 365)
  MS-500 (Security Administration)
  CISSP is a major plus.
• Strong communication skills with the ability to explain security policies to C-suite executives without excessive technical jargon.