Senior Data Protection Specialist (PURVIEW Software)

SITA; Delhi; Hybrid; INR 1,800,000 - 3,200,000; Full time

Benefits offered by this job

Flex Week – WFH 2 days

Flex Location – up to 30 days abroad

Employee Wellbeing program

Professional Development

Competitive benefits

Job summary

SITA is seeking a Senior Data Protection Specialist (Purview) to implement, operate, and continuously improve data protection controls across endpoints, email, cloud, and AI services. You will work with Security Operations, Compliance, Legal, Privacy, IT Operations, and business stakeholders to align controls with regulatory requirements and policies.

Responsibilities include designing DLP policies, managing Purview DLP, monitoring incidents, and guiding risk assessments and audits.

Qualifications

• Strong understanding of Data Loss Prevention concepts.
• Experience administering Microsoft Purview.
• Knowledge of data classification and information protection frameworks.
• Understanding of cloud security principles.
• Familiarity with security monitoring and incident response.
• Experience with Microsoft 365 security and compliance technologies.
• Ability to create and maintain PowerShell automation scripts.

Responsibilities

• Design and manage DLP policies across enterprise platforms.
• Configure and maintain Microsoft Purview DLP policies and SITs.
• Monitor DLP alerts and investigate incidents.
• Coordinate remediation with stakeholders across Legal, HR, and Security.
• Assist with data discovery and risk assessments.
• Support compliance audits and governance reporting.

Skills

DLP concepts

Purview administration

PowerShell automation

M365 security

Incident response

Cloud security

Tools

Microsoft Purview

PowerShell

Job description

Overview

WELCOME TO SITA

We're the team that keeps airports moving, airlines flying smoothly, and borders open. Our tech and communication innovations are the secret behind the success of the world’s air travel industry.

You'll find us at 95% of international hubs. We partner closely with over 2,500 transportation and government clients, each with their own unique needs and challenges. Our goal is to find fresh solutions and cutting-edge tech to make their operations run like clockwork. Want to be a part of something big? Are you ready to love your job? The adventure begins right here, with you, at SITA.

About The Role & Team

As a Senior Data Protection Specialist (Purview), you will be responsible for implementing, operating, monitoring, and continuously improving the organization’s data protection controls. The role focuses on preventing unauthorized disclosure, loss, or misuse of sensitive information across endpoints, email, cloud services, collaboration platforms, and AI applications.

You will work closely with Security Operations, Compliance, Legal, Privacy, IT Operations, and Business stakeholders to ensure data protection controls align with regulatory requirements, corporate policies, and business objectives.

What You’ll Do

DLP Policy Administration (Must Have)

• Design, configure, and maintain DLP policies across enterprise platforms.
• Implement controls to protect confidential, personal, regulated, and intellectual property data.
• Develop classification-based controls using sensitivity labels and data classification frameworks.
• Tune policies to balance security requirements with user productivity.
• Maintain policy documentation and operational procedures.

Microsoft Purview Administration

• Manage Microsoft Purview Data Loss Prevention policies (Must Have)
• Configure Sensitive Information Types (SITs), trainable classifiers, and custom classifiers.
• Implement Endpoint DLP controls for Windows and macOS devices.
• Configure DLP protections for Exchange Online, SharePoint Online, OneDrive, Teams, Power Platform, Copilot and AI services, and third-party SaaS applications.

Incident Monitoring and Response

• Monitor DLP alerts and incidents.
• Investigate policy violations and potential data exfiltration events.
• Perform root-cause analysis of incidents.
• Coordinate remediation with end users, managers, HR, Legal, and Security teams.
• Escalate high-risk events through established security incident processes.

Data Discovery and Risk Assessment

• Support data discovery initiatives.
• Assist business units in identifying sensitive information repositories.
• Assess risks associated with data flows and business processes.
• Recommend technical and procedural controls to mitigate identified risks.

Compliance and Governance (Good To Have)

• Support compliance initiatives related to ISO 27001, GDPR, NIS2, SOX, PCI DSS, and industry-specific regulatory requirements.
• Provide evidence for internal and external audits.
• Maintain audit trails and reporting related to DLP controls.
• Support legal hold and eDiscovery processes when required.

Reporting and Analytics (Good To Have)

• Develop operational dashboards and KPI reporting.
• Report on DLP incidents, data exfiltration attempts, policy effectiveness, user risk trends, and compliance posture.
• Present findings to security leadership and governance forums.

Continuous Improvement

• Identify opportunities to enhance DLP coverage and effectiveness.
• Evaluate emerging data protection technologies.
• Implement new detection and prevention capabilities.
• Participate in technology assessments and proofs-of-concept.

Technical Responsibilities

• Microsoft Purview DLP
• Sensitivity Labels
• Retention Labels
• Insider Risk Management

Qualifications

ABOUT YOUR SKILLS

Technical Skills

• Strong understanding of Data Loss Prevention concepts. (Must Have)
• Experience administering Microsoft Purview. (Must Have)
• Knowledge of data classification and information protection frameworks.
• Understanding of cloud security principles.
• Familiarity with security monitoring and incident response.
• Experience with Microsoft 365 security and compliance technologies. (Must Have)
• Ability to create and maintain PowerShell automation scripts.

Analytical Skills (Must Have)

• Strong investigative and troubleshooting capabilities.
• Ability to analyse alerts and identify false positives.
• Risk assessment and problem-solving skills.
• Ability to interpret compliance requirements and translate them into technical controls.

Communication Skills

• Ability to communicate with technical and non-technical stakeholders.
• Experience producing governance reports and executive summaries.
• Strong documentation and process-writing skills.

GOOD TO HAVE

• Microsoft Certified: Information Protection Administrator (SC-400)
• Microsoft Security Operations Analyst (SC-200)
• Microsoft Security Administrator (SC-300)
• CISSP
• CISM
• CRISC

What We Offer

We’re all about diversity. We operate in 200 countries and speak 60 different languages and cultures. We’re really proud of our inclusive environment. Our offices are comfortable and fun places to work, and we make sure you get to work from home too. Find out what it's like to join our team and take a step closer to your best life ever.

• Flex Week: Work from home up to 2 days/week (depending on your team’s needs)
• Flex Day: Make your workday suit your life and plans.
• Flex Location: Take up to 30 days a year to work from any location in the world.
• Employee Wellbeing: We’ve got you covered with our Employee Assistance Program (EAP), for you and your dependents 24/7, 365 days/year. We also offer Champion Health – a personalized platform that supports a range of wellbeing needs.
• Professional Development: Level up your skills with our training platforms, including LinkedIn Learning!
• Competitive Benefits: Competitive benefits that make sense with both your local market and employment status.

SITA is an Equal Opportunity Employer. We value a diverse workforce. In support of our Employment Equity Program, we encourage women, aboriginal people, members of visible minorities, and/or persons with disabilities to apply and self-identify in the application process.