DLP & BYOD Security Design Lead

Confidential; Mandaluyong; On-site; PHP 1,800,000 - 3,000,000; Full time

Job summary

Confidential in Metro Manila is seeking a senior specialist to own the high-level and low-level design for information protection, DLP and BYOD, deploying Purview across the client estate. You will design the sensitivity label taxonomy, auto-labelling rules, and lead a small engineering pod to validate, simulate, and productionize policies while ensuring audit readiness and knowledge transfer.

Working knowledge of Entra Conditional Access, Intune App Protection, and licensing considerations will

Qualifications

• 8+ years hands-on designing and implementing Microsoft Purview Information Protection and DLP.
• Deep experience with sensitivity labels: taxonomy design, protection settings, label policies and publishing.
• Unified DLP across Exchange Online, SharePoint Online, OneDrive and Microsoft Teams.
• Sensitive Information Types, EDM, trainable classifiers and OCR-based detection.
• Auto-labelling design, simulation-mode execution and precision/recall tuning.
• MIP client packaging, compatibility validation and phased deployment.
• Knowledge of Entra Conditional Access and Intune App Protection policies.
• 365 licensing literacy: distinguish E3+IP&G from E5 features.
• Documentation: HLD/LLD, test cases and knowledge-transfer materials.
• Mandatory: SC-400 certification; Preferred: SC-300, SC-100.

Responsibilities

• Own the high-level and low-level design for information protection, DLP and BYOD.
• Design the sensitivity label taxonomy, including protection, marking, publishing and assignment policies.
• Design the DLP policy model and the graduated enforcement approach — audit, then warn, then block.
• Design auto-labelling rules, run them in simulation mode, and tune precision before production enablement.
• Review and refine the existing pilot configuration before scaling it organisation-wide.
• Regression-test new labels and policies against existing labels, DLP rules and live business processes.
• Provide design authority and QA over the engineering team.
• Deliver knowledge transfer and runbooks so the client can operate independently.

Skills

Purview DLP design

Sensitivity labels taxonomy

DLP across M365 apps

EDM & classifiers

Auto-labelling design

MIP packaging & deployment

Entra Conditional Access

365 licensing literacy

HLD/LLD documentation

Tools

Microsoft Purview

SharePoint Online

Exchange Online

OneDrive

Microsoft Teams

Intune

Entra

Job description

Confidential in Metro Manila is seeking a senior specialist to own the high-level and low-level design for information protection, DLP and BYOD, deploying Purview across the client estate. You will design the sensitivity label taxonomy, auto-labelling rules, and lead a small engineering pod to validate, simulate, and productionize policies while ensuring audit readiness and knowledge transfer.

Working knowledge of Entra Conditional Access, Intune App Protection, and licensing considerations will