Business Analyst - M365 Data Classification & Information Governance

D-ploy; Oost-Vlaanderen; On-site; EUR 50,000 - 80,000; Full time

Benefits offered by this job

International work environment

Professional development opportunities

Referral program

Job summary

D-ploy is seeking an experienced Business Analyst to support a Microsoft 365 data classification and information protection initiative in a regulated, international environment. You will translate policies into practical business processes and technical requirements, collaborating with stakeholders, compliance teams and IT specialists to ensure secure and compliant collaboration.

The role emphasizes translating governance policies into actionable controls, defining KPIs, and supporting change

Qualifications

• 4+ years of experience as a Business Analyst in compliance, information governance or data protection.
• Involvement in at least one Microsoft 365 information protection project.
• Knowledge of Purview sensitivity labels and DLP from a business perspective.
• Experience translating policies into practical processes and controls.
• Strong requirements gathering, process design and stakeholder workshops.
• Experience developing test scenarios and coordinating UAT.
• Ability to define KPIs and reporting using Excel, Power BI or monday.com.
• Experience in regulated industries, preferably pharma or life sciences.
• Excellent communication, documentation and stakeholder management skills.
• Fluency in English and a valid criminal record extract (not older than 3 months).
• Nice to have: SC-401/SC-400, change management methods like Prosci, familiarity with monday.com.

Responsibilities

• Gather, analyze and document requirements for data classification and information protection.
• Translate policies into requirements for labels, encryption, sharing and DLP controls.
• Define processes for labelling files, sites and collaborative content.
• Identify sensitive information and compliance gaps with stakeholders.
• Document exceptions for external collaboration and mobile device use.
• Develop test scenarios, coordinate UAT and consolidate findings for decisions.
• Define KPIs and reporting requirements, identify data sources and dashboards.
• Collaborate with technical teams to align business needs with solutions.
• Contribute to training materials and user communications to support adoption.

Skills

Requirements gathering

Stakeholder management

Business analysis

Regulatory compliance

Data protection

KPIs & reporting

Process design

UAT coordination

Change management

Communication skills

Tools

Microsoft Purview

Power BI

Excel

monday.com

SharePoint

Job description

D-ploy is a dynamic IT and Engineering Solutions company operating across the EMEA region, including Switzerland, Germany, Czech Republic, Austria, the UK, and the USA. We are committed to delivering reliable and efficient services to our clients through strong partnerships and a people-focused culture.

We are looking for an experienced Business Analyst to support a Microsoft 365 data classification and information protection initiative within an international, highly regulated environment.

This role is ideal for someone who combines strong business analysis skills with a solid understanding of information governance, data protection and Microsoft 365 collaboration tools.

You will work closely with business stakeholders, technical specialists and compliance teams to translate data protection policies into practical business processes, technical requirements and user-friendly solutions, ensuring that security measures are effectively implemented and adopted across the organization.

Key Responsibilities

• Gather, analyze and document business requirements related to data classification, information protection and secure collaboration.
• Translate data classification policies into clear business requirements for sensitivity labels, encryption, sharing permissions and Data Loss Prevention (DLP) controls.
• Define and document processes for classifying and labelling new and existing files, documents and SharePoint sites.
• Collaborate with business stakeholders and key users to identify sensitive information, high-risk content and potential compliance gaps.
• Identify and document business scenarios and exceptions involving external collaboration, partner access, mobile devices and Microsoft Copilot.
• Develop test scenarios and test cases for proof-of-concept activities, coordinate User Acceptance Testing (UAT) and consolidate findings to support implementation decisions.
• Define key performance indicators (KPIs) to measure adoption, compliance and technical effectiveness, including reporting requirements and data sources.
• Work closely with technical teams, cybersecurity specialists and information governance stakeholders to ensure alignment between business requirements and technical solutions.
• Support change management and user adoption initiatives by contributing to training materials, user guides, FAQs and stakeholder communications.

What We're Looking For

• 4+ years of experience as a Business Analyst, including projects related to compliance, information governance or data protection.
• Proven involvement in at least one Microsoft 365 information protection or secure collaboration project.
• Good working knowledge of Microsoft Purview sensitivity labels and Data Loss Prevention (DLP) from a business and process perspective.
• Experience translating data classification, information governance or data protection policies, such as GDPR or GxP, into practical business processes and controls.
• Strong experience gathering and documenting business requirements, designing processes and facilitating stakeholder workshops.
• Experience developing test scenarios, writing test cases and coordinating User Acceptance Testing (UAT).
• Ability to define KPIs and reporting requirements using tools such as Excel, Power BI or monday.com.
• Experience working in regulated industries, preferably pharmaceuticals, life sciences or similar environments.
• Excellent communication, documentation and stakeholder management skills.
• Fluency in English.
• Valid criminal record extract, not older than three months, required.

Nice to Have

• Microsoft SC-401 or previous SC-400 certification.
• Experience with change management methodologies such as Prosci.
• Familiarity with monday.com or similar project management and reporting platforms.

• Broad range of tasks and responsibilities

• Friendly and international working environment

• Professional development opportunities

• Referral program (“Fishing for Friends”)

• Company-sponsored events

Is IT in your DNA?