Data Protection Engineer

Insight Global; Lewisville (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

Insight Global is seeking a Data Protection and DLP Engineer to design, deploy, and manage DLP policies across endpoints, email, cloud storage, and SaaS. You will administer Microsoft Purview, implement data classification, and enforce governance for AI usage.

The role requires 3–5 years in data protection or information security, GDPR/ISO 27001 knowledge, and a Bachelor’s in a related field or equivalent experience. On-site in Texas.

Qualifications

• 3–5 years of experience in Data Protection, DLP Engineering, or Information Security.
• Hands-on experience with Microsoft Purview and DLP administration.
• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent practical experience.
• Strong knowledge of GDPR compliance and ISO 27001.
• Experience handling sensitive data including CCI (credit card information).
• Knowledge of AI security and governance considerations.

Responsibilities

• Design, deploy, and maintain DLP policies across endpoints, email, cloud, and SaaS.
• Administer and optimize Purview including sensitivity labeling and data classification.
• Establish guardrails for AI tools and monitoring of data leakage risk.
• Collaborate with IT, legal, and business on data governance standards for AI.
• Conduct data discovery/classification to protect sensitive data across environments.
• Monitor alerts, investigate violations, and drive incident remediation.
• Support ISMS (ISO 27001) maintenance, audits, and continuous improvement.
• Ensure GDPR compliance including DSARs and privacy-by-design principles.
• Support PIPL compliance for China-related data processing.
• Develop training materials on data protection, DLP, and safe AI usage.

Skills

GDPR compliance

ISO 27001 knowledge

AI security knowledge

DLP / data protection

Education

Bachelor's degree in CS/InfoSec

Tools

Microsoft Purview

Job description

Job Description

Design, deploy, and maintain DLP policies and controls across endpoints, email, cloud storage, and SaaS applications using enterprise DLP tooling.

Administer and optimize Microsoft Purview, including sensitivity labels, data classification, insider risk management, information barriers, retention policies, and compliance manager assessments.

Establish and maintain data protection guardrails for AI tools, including Microsoft Copilot and Claude, covering data leakage prevention, prompt/response monitoring, access controls, and acceptable use policies.

Partner with IT, legal, and business stakeholders to define data handling and governance standards for AI-generated content and AI-assisted workflows.

Conduct data discovery and classification exercises to identify and protect sensitive, confidential, and regulated data across on-premises and cloud environments.

Monitor DLP and Purview alerts, investigate policy violations, and drive remediation of data protection incidents.

Maintain and support the organization's ISO 27001 information security management system (ISMS), including control documentation, internal audits, and continuous improvement activities.

Ensure ongoing compliance with GDPR requirements, including data mapping, data subject access requests (DSARs), and privacy-by-design principles.

Support compliance efforts related to China's Personal Information Protection Law (PIPL) where the organization processes data tied to Chinese data subjects or operations.

Develop and deliver training and awareness materials on data protection, DLP, and safe AI usage for employees and stakeholders.

Stay current on emerging AI governance frameworks, data protection regulations, and DLP/Purview product capabilities, recommending enhancements to the data protection program.

Prepare reports, dashboards, and documentation for audits, regulators, and executive leadership.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

• Working knowledge of GDPR and ISO 27001 compliance requirements
• CCI knowledge (credit card information knowledge)
• 3-5 years of experience in Data Protection, DLP Engineering, or Information Security
• Hands-on experience with Microsoft Purview and DLP administration
• Strong understanding of data classification, tagging, and protection toolsets
• Experience handling and protecting sensitive data, including credit card information (CCI)
• Strong knowledge of AI security, with expertise in Claude preferred Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience [Required]
• CIPP/E, CIPT, CISSP, CISM, or ISO 27001 Lead Implementer/Auditor [Preferred]