Compliance Engineer

Saltu Staffing; Houston (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

Saltu Staffing seeks a Governance, Risk, and Compliance (GRC) Engineer with Microsoft Purview expertise to lead data governance, security, and compliance initiatives for a prestigious law firm. This remote role serves stakeholders across IT, legal, and information governance while aligning security with regulatory requirements.

The ideal candidate has deep Purview/m365 experience, strong PowerShell skills, and familiarity with eDiscovery, information protection, and DLP.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Law, or a related field required.
• 5–8 years of experience managing and securing Microsoft 365 environments.
• Proven expertise with Microsoft Purview, Entra ID, Exchange Online, SharePoint Online, and Exchange On-Premises.
• Strong understanding of legal hold, privacy regulations, and compliance standards.
• Experience with Azure Information Protection and data-at-rest encryption (e.g., Thales HSMs).
• Proficiency in PowerShell for automation and management tasks.
• Familiarity with identity federation and business continuity planning.

Responsibilities

• Implement, configure, and maintain Microsoft Purview components including Data Map, Unified Catalog, Information Protection, and Compliance Manager.
• Design and execute legal hold strategies using Purview’s eDiscovery and retention capabilities.
• Develop and enforce data governance policies and procedures.
• Conduct regular audits and assessments of data practices and compliance posture.
• Generate reports and insights using Power BI and Purview dashboards.
• Implement information protection strategies to safeguard sensitive data across Microsoft 365 and Azure environments.
• Configure and enforce Data Loss Prevention (DLP) policies to prevent unauthorized data sharing and leakage.
• Establish and manage data retention policies to ensure regulatory adherence.
• Monitor and manage insider threats and respond to security alerts and incidents.
• Develop and implement data classification and labeling strategies.
• Continuously assess and improve the security posture of collaboration environments.
• Experience with IAM strategies for Microsoft 365 collaboration services.
• Familiarity with Entra ID (formerly Azure AD), including service principals, managed identities, and federation.
• Enforce access controls and identity governance policies.
• Collaborate with legal, IT, and governance teams to align security and compliance goals.
• Work with workload administrators and business application owners to implement necessary controls.
• Provide training and support to staff on data governance and security best practices.
• Maintain detailed documentation of security policies, procedures, and incident responses.

Skills

Data governance

Security governance

PowerShell

IAM management

eDiscovery

Education

Bachelor's degree

Tools

Microsoft Purview

Entra ID

Exchange Online

SharePoint Online

Power BI

Azure Information Protection

Job description

A prestigious law firm is seeking a highly skilled Governance, Risk, and Compliance (GRC) Engineer with expertise in Microsoft Purview to provide technical leadership and subject-matter expertise for our firm’s data governance, security, and compliance initiatives. This role will be responsible for designing, implementing, and managing Microsoft Purview solutions and Microsoft 365 security services to ensure data governance, security, and compliance initiatives. This role serves as a trusted advisor to the Office of General Counsel, eDiscovery, IT, and Information Governance stakeholders to protect sensitive data, mitigate risks, and support legal hold and eDiscovery processes. This is a Firmwide, full-time, exempt, remote position resident in our Austin, Dallas, Houston, New York, or Washington DC office with excellent benefits

Essential Duties and Responsibilities

• :Implement, configure, and maintain Microsoft Purview components including Data Map, Unified Catalog, Information Protection, and Compliance Manager
• .Design and execute legal hold strategies using Purview’s eDiscovery and retention capabilities
• .Develop and enforce data governance policies and procedures
• .Conduct regular audits and assessments of data practices and compliance posture
• .Generate reports and insights using Power BI and Purview dashboards
• .Implement information protection strategies to safeguard sensitive data across Microsoft 365 and Azure environments
• .Configure and enforce Data Loss Prevention (DLP) policies to prevent unauthorized data sharing and leakage
• .Establish and manage data retention policies to ensure regulatory adherence
• .Monitor and manage insider threats and respond to security alerts and incidents
• .Develop and implement data classification and labeling strategies
• .Continuously assess and improve the security posture of collaboration environments
• .Experience with IAM strategies for Microsoft 365 collaboration services
• .Familiarity with Entra ID (formerly Azure AD), including service principals, managed identities, and federation
• .Enforce access controls and identity governance policies
• .Collaborate with legal, IT, and governance teams to align security and compliance goals
• .Work with workload administrators and business application owners to implement necessary controls
• .Provide training and support to staff on data governance and security best practices
• .Maintain detailed documentation of security policies, procedures, and incident responses

Qualifications

• :Bachelor’s degree in Information Technology, Computer Science, Law, or a related field required
• .5–8 years of experience managing and securing Microsoft 365 environments
• .Proven expertise with Microsoft Purview, Entra ID, Exchange Online, SharePoint Online, and Exchange On-Premises
• .Strong understanding of legal hold, privacy regulations, and compliance standards
• .Experience with Azure Information Protection and data-at-rest encryption (e.g., Thales HSMs)
• .Proficiency in PowerShell for automation and management tasks
• .Familiarity with identity federation and business continuity planning

Preferred Certifications

• sMicrosoft 365 Certified: Administrator Exper
• tMicrosoft 365 Certified: Information Security Administrator Associat
• eCertified Information Privacy Professional (CIPP
• )Certified Information Governance Professional (IGP

)Physical Demands

• :Must be able to sit for extensive periods of time, either while using the telephone or computer
• .Must be able to work in a high-pressure environment with time restraints and frequent interruptions

.Working Condition and Environment

• :Work is normally performed in a typical office environment, which includes the ability to visit face-to-face and virtually with colleagues
• .Position is full-time and requires a five-day work week and standard hours as outlined in the Firm policy manual. Additional hours, including weekend and evening hours may be required to perform the essential functions of the job
• .Position may require some out-of-town travel, including weekends
• .Position is fully remote. Must have the ability to work remotely, and live within commutable distance of the office for occasional on-site attendance