Information Protection Engineer (Purview)

PRA; Brisbane; Hybrid; AUD 140,000 - 180,000; Full time

Job summary

PRA in Brisbane is seeking an Information Protection Engineer to lead the Purview uplift and embed ongoing protection capabilities. You will own Purview sensitivity labeling, DLP, and integration efforts as maturity allows, turning business requirements into practical controls for the org.

You will engage with business teams, design SITs, and build a roadmap for Purview usage while remaining hands-on during the uplift. The role is hybrid and based in Brisbane.

Qualifications

• Hands-on Microsoft Purview implementation experience you've owned end to end at least once.
• Proven experience developing custom SITs and refining policies based on real data.
• The confidence to engage the business directly and work out requirements without having data handed to you.
• Clear communication with technical and non-technical people alike.
• Working knowledge of Microsoft Defender, Defender for Cloud Apps and Sentinel.

Responsibilities

• Take ownership of the Microsoft Purview system: sensitivity labels, auto-labelling, DLP and, as maturity allows, enforcement and encryption.
• Design, build and tune custom Sensitive Information Types for data inbuilt classifiers can't handle.
• Analyse reporting and production data to diagnose false positives and negatives and recommend improvements.
• Build the Purview roadmap, covering what to turn on, what not to, and when, including SharePoint and Defender for Cloud Apps integration next year.
• Act as the go-to for Purview questions and issues, translating between technical and business teams.

Job description

• Shape the roadmap and own this orgs Purview capability into BAU

• Great annual salary on offer!
• Brisbane based, hybrid role
• Shape the roadmap and own this orgs Purview capability into BAU

About

Our client is part way through a cyber maturity uplift as part of a greater business transformation, and needs an Information Protection Engineer to join them as they continue this uplift, working heavily with Microsoft Purview.

This is not a ticket-taking engineering role. You'll go out into the business, work out what's really sensitive, and turn that into controls people can live with. Once the project wraps, this role will become the organisation's ongoing information protection capability, and that capability is yours.

The role

• Take ownership of the Microsoft Purview system: sensitivity labels, auto-labelling, DLP and, as maturity allows, enforcement and encryption
• Design, build and tune custom Sensitive Information Types for data inbuilt classifiers can't handle
• Analyse reporting and production data to diagnose false positives and negatives and recommend improvements
• Build the Purview roadmap, covering what to turn on, what not to, and when, including SharePoint and Defender for Cloud Apps integration next year
• Act as the go-to for Purview questions and issues, translating between technical and business teams

What you'll bring

• Hands-on Microsoft Purview implementation experience you've owned end to end at least once
• Proven experience developing custom SITs and refining policies based on real data
• The confidence to engage the business directly and work out requirements without having data handed to you
• Clear communication with technical and non-technical people alike
• Working knowledge of Microsoft Defender, Defender for Cloud Apps and Sentinel

Nice to have: a Microsoft security certification, Queensland Government information security policy knowledge, SaaS DLP experience and Power BI reporting skills.

Culture

• Initial you'll be part of a small, capable project team, plus the wider cyber team around you every step of the way.
• Self-directed: you'll be trusted to set direction, not just follow it
• Hybrid, getting together in the office to be with your colleagues 2-3 days/week
• Learning and development, study assistance and a wellbeing program