Microsoft Security Solution Architect

Squareone; Greater London; Remote; GBP 92,000 - 101,000; Part time

Job summary

Square One Resources Limited is seeking an experienced Microsoft Purview Data Governance Consultant to support an enterprise-wide governance project within a complex Microsoft 365 environment. The role focuses on retention policy design, records declaration and defensible disposal using Purview.

You will collaborate with governance, legal, IT and business teams to translate regulatory requirements into practical, auditable controls across up to 20 apps.

Qualifications

• Proven track record delivering Purview Data Lifecycle Management in large Microsoft 365 environments.
• Hands-on expertise with retention labels, policies, auto-labeling and records declaration.
• Experience with disposition reviews, preservation lock and eDiscovery.
• Strong governance knowledge, including file-plan design and defensible disposal.
• Excellent workshop facilitation and stakeholder management.

Responsibilities

• Plan and facilitate discovery workshops with information governance, legal, IT, application owners and relevant business stakeholders.
• Assess up to 20 enterprise applications against retention schedules, including personal data holdings, retention obligations, deletion capabilities, disposal evidence and integration options.
• Review existing data asset registers, records retention schedules, Microsoft 365 retention and labelling configurations, legal holds, Exchange MRM and backup arrangements.
• Produce a current-state assessment, gap analysis and prioritised risk register, identifying areas of non-compliance and opportunities for improvement.
• Design an information lifecycle operating model covering governance responsibilities, decision rights, disposition reviews, exceptions, legal holds and disposal suspension.
• Develop a file plan aligned with approved retention schedules and records management requirements.
• Produce a Microsoft Purview high-level design covering retention labels and policies, auto‑labeling, adaptive scopes, event‑based retention, record declaration, disposition review, preservation lock, monitoring and reporting.
• Configure and validate a controlled pilot across up to two business areas and 20-30 users, using simulation mode before enforcement.
• Lead functional validation and document end-to-end disposal processes, including evidence capture and auditability.
• Assess third‑party applications and backup platforms to identify retention and disposal control gaps, recommending appropriate technical, integrated or procedural solutions.
• Evaluate interactions between Microsoft 365 retention, eDiscovery, legal holds and existing information governance controls.
• Document configuration decisions, testing outcomes, risks, assumptions and implementation recommendations.
• Deliver knowledge transfer for administrators and reviewers, ensuring the solution can be supported and maintained effectively.
• Produce a roadmap for wider implementation across the enterprise estate and present findings and recommendations to senior stakeholders.

Skills

Microsoft Purview

Data Governance

Retention policies

eDiscovery

Stakeholder management

Workshop facilitation

Tools

Purview Console

Job description

Job Title: Microsoft Purview Data Governance Consultant
Location: United Kingdom (Remote Working)
Salary/Rate: £500-£550 per day (Inside IR35)
Start Date: 29th of October
Job Type: Short term contract

An opportunity has arisen for an experienced Microsoft Purview Data Governance Consultant to support an enterprise data governance and information lifecycle management project within a complex Microsoft 365 environment.

The role will focus on assessing existing data retention and records management practices, identifying compliance gaps and designing practical governance controls using Microsoft Purview. You will play a key role in establishing a defensible approach to information lifecycle management, including retention policies, records declaration, disposition reviews and secure data disposal.

You will work closely with information governance, legal, IT, records management and business stakeholders to understand existing arrangements, define requirements and deliver a practical solution. This is a hands‑on consultancy assignment requiring strong technical knowledge of Microsoft Purview alongside a solid understanding of enterprise information governance, regulatory retention requirements and defensible disposal.

The contract will be delivered remotely across a defined 18‑day schedule, covering discovery, design, configuration, testing, pilot implementation and project closure.

Job Responsibilities/Objectives

• Plan and facilitate discovery workshops with information governance, legal, IT, application owners and relevant business stakeholders.
• Assess up to 20 enterprise applications against retention schedules, including personal data holdings, retention obligations, deletion capabilities, disposal evidence and integration options.
• Review existing data asset registers, records retention schedules, Microsoft 365 retention and labelling configurations, legal holds, Exchange MRM and backup arrangements.
• Produce a current-state assessment, gap analysis and prioritised risk register, identifying areas of non-compliance and opportunities for improvement.
• Design an information lifecycle operating model covering governance responsibilities, decision rights, disposition reviews, exceptions, legal holds and disposal suspension.
• Develop a file plan aligned with approved retention schedules and records management requirements.
• Produce a Microsoft Purview high-level design covering retention labels and policies, auto‑labeling, adaptive scopes, event‑based retention, record declaration, disposition review, preservation lock, monitoring and reporting.
• Configure and validate a controlled pilot across up to two business areas and 20-30 users, using simulation mode before enforcement.
• Lead functional validation and document end-to-end disposal processes, including evidence capture and auditability.
• Assess third‑party applications and backup platforms to identify retention and disposal control gaps, recommending appropriate technical, integrated or procedural solutions.
• Evaluate interactions between Microsoft 365 retention, eDiscovery, legal holds and existing information governance controls.
• Document configuration decisions, testing outcomes, risks, assumptions and implementation recommendations.
• Deliver knowledge transfer for administrators and reviewers, ensuring the solution can be supported and maintained effectively.
• Produce a roadmap for wider implementation across the enterprise estate and present findings and recommendations to senior stakeholders.

Required Skills/Experience

• A proven track record delivering Microsoft Purview Data Lifecycle Management and Records Management solutions within enterprise Microsoft 365 environments.
• Hands‑on expertise in Microsoft Purview retention labels, label policies, auto‑labeling, adaptive scopes, event‑based retention and records declaration.
• Experience with disposition reviews, regulatory records, preservation lock and the operational implications of enforcing retention and disposal controls.
• A strong understanding of Microsoft 365 retention processing, Exchange MRM, eDiscovery and legal holds.
• Knowledge of retention and governance considerations across Microsoft Teams content, meeting recordings, transcripts and Copilot interaction history.
• Experience assessing existing retention configurations, identifying conflicting policies and recommending appropriate remediation.
• Strong information governance and records management knowledge, including file‑plan design, defensible disposal, proof of disposal, legal holds and data subject rights.
• The ability to assess third‑party applications and backup platforms against retention requirements and identify appropriate control measures.
• Experience producing high‑quality assessments, solution designs, risk registers, operating models, test evidence, configuration documentation and implementation roadmaps.
• Strong workshop facilitation and stakeholder management skills, with the ability to engage legal, IT, Data Protection Officers, records management teams and senior business stakeholders.
• The ability to translate regulatory and governance requirements into practical, supportable technical controls.
• A structured and evidence‑led approach, with strong attention to documentation, auditability and acceptance criteria.
• The ability to work independently, challenge unclear requirements and proactively identify delivery risks.

Desirable Skills/Experience

• Microsoft compliance, information protection or records management certifications.
• Experience working within regulated environments, including life sciences, research or healthcare.
• Familiarity with Microsoft Purview Data Map and Unified Catalog, particularly in assessing suitability and future roadmap options.
• Experience delivering information governance or records management transformation initiatives across complex enterprise application estates.
• Experience working with senior sponsors and multidisciplinary teams to agree governance controls and implementation priorities.

The successful candidate must be available across the proposed delivery schedule, covering discovery and design in late October and November, build and pilot activities in late November and early December, and project closure on 7th December. Some flexibility may be available for the right consultant.