Senior Data Protection & Privacy Consultant

EY; Thiruvananthapuram; On-site; INR 1,400,000 - 2,200,000; Full time

Job summary

EY Technology Consulting seeks an experienced Senior Consultant specializing in Microsoft Purview to design, implement, and support enterprise data protection and compliance solutions across the data estate. The role focuses on Data Loss Prevention, data classification, and insider risk management with collaboration across stakeholders.

The candidate will work on configuring Purview DLP, sensitivity labels, auto-labeling strategies, and retention concepts while aligning with GDPR, PCI-DSS,

Qualifications

• Experience with Microsoft Purview Data Security and Compliance solutions.
• Strong understanding of DLP, labeling, and policy governance.
• Familiarity with GDPR, PCI-DSS, HIPAA, ISO 27001 is a plus.

Responsibilities

• Design, implement, and support enterprise data protection and compliance solutions.
• Develop DLP policies across Microsoft 365 services and endpoints.
• Configure and manage Sensitivity Labels, Label Policies, Auto-labeling, and Mandatory Labeling.
• Investigate insider risk alerts and collaborate with security, legal, compliance, and HR teams.

Skills

Microsoft Purview

Data Loss Prevention (DLP)

Sensitivity labeling

Insider Risk Management

Data Classification

Data Governance

Policy design & implementation

Regulatory compliance

Tools

Microsoft Purview Portal

Microsoft 365 Compliance Centre

Job description

Technology Consulting Senior Consultant Microsoft Purview

We are seeking an experienced Security Consultant Microsoft Purview to design, implement, and support enterprise data protection and compliance solutions. The ideal candidate will possess strong expertise in Microsoft Purview Data Security services, including Data Loss Prevention (DLP), Data Classification and Sensitivity Labeling, Insider Risk Management, and Data Lifecycle Management. The consultant will work closely with business stakeholders, compliance teams, and technical teams to protect sensitive information, reduce insider risks, and ensure regulatory compliance across the organization's data estate.

Your Key Responsibilities

Data Loss Prevention (DLP)

• Design, implement, and optimize Microsoft Purview DLP policies across Microsoft 365 services, endpoints, and supported third-party repositories.
• Define detection logic using Sensitive Information Types (SITs), trainable classifiers, custom classifiers, and EDM.
• Monitor DLP incidents and provide recommendations for policy tuning and risk reduction.
• Support deployment of Endpoint DLP controls for data exfiltration prevention.

Data Classification & Labeling

• Develop enterprise data classification frameworks aligned with business and regulatory requirements.
• Configure and manage Sensitivity Labels, Label Policies, Auto-labeling, and Mandatory Labeling strategies.
• Perform data discovery and classification workshops with business stakeholders.
• Support protection technologies including encryption, content markings, and access controls.

Insider Risk Management

• Configure and manage Insider Risk Management policies and analytics.
• Investigate insider risk alerts and collaborate with security, legal, compliance, and HR teams during investigations.
• Develop insider risk use cases focused on data theft, data leakage, security policy violations, and privilege misuse.
• Produce risk reports and executive dashboards.

Data Lifecycle Management

• Implement retention labels, retention policies, disposition reviews, and records management controls.
• Support regulatory and compliance requirements through information governance processes.
• Assist in defining data retention schedules and defensible data disposal strategies.
• Collaborate with stakeholders to automate lifecycle management processes.

Consulting & Delivery

• Conduct workshops, assessments, and requirement-gathering sessions.
• Develop solution designs, implementation plans, and governance frameworks.
• Support Proof of Concepts (PoCs), pilot deployments, and production rollouts.
• Create technical documentation, operational runbooks, and knowledge-transfer materials.
• Provide troubleshooting support and operational guidance for Purview solutions.
• Stay current with Microsoft Purview roadmap, emerging data protection trends, and compliance requirements.

Skills and attributes for success

Technical Skills

• Strong hands-on experience with Microsoft Purview Data Security and Compliance solutions.
• Expertise in:
  • Data Loss Prevention (DLP)
  • Sensitivity Labels and Information Protection
  • Data Classification and Governance
  • Insider Risk Management
  • Data Lifecycle Management (desirable)
  • Records Management (desirable)
  • Communication Compliance (desirable)
  • eDiscovery (desirable)
• Experience with Microsoft 365 Compliance Centre and Microsoft Purview Portal.
• Understanding of regulatory frameworks such as GDPR, PCI-DSS, HIPAA, ISO 27001.