DLP Senior Analyst - Purview

Sidley Austin LLP (IL LLP); Chicago (IL); On-site; USD 98,000 - 135,000; Full time

Benefits offered by this job

Bonus eligibility

Benefits package

Job summary

Sidley Austin LLP in Chicago seeks a Senior Data Governance and Compliance Engineer focused on Microsoft Purview and data protection across Microsoft 365 and Azure. You will design policies, implement controls, and collaborate with IT, Legal, and Compliance to meet GDPR, CCPA, HIPAA and ISO 27001 requirements.

The role requires a Bachelor’s degree and 5+ years in security/compliance with Purview expertise; certifications such as CISSP or Azure Security Engineer are preferred.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Information Governance, or a related field is required.
• Minimum of 5 years of experience in security engineering, compliance engineering, or data governance, with a strong focus on Microsoft 365 and Purview solutions.
• Hands‑on experience implementing and managing Microsoft Purview capabilities such as Information Protection, DLP, Insider Risk Management, Records Management, and eDiscovery.
• Practical knowledge of Microsoft 365 security and compliance tools.
• Strong understanding of data governance principles, regulatory compliance requirements (GDPR, CCPA, HIPAA, ISO 27001), and information lifecycle management.
• Preferred: Microsoft certifications such as Information Protection Administrator Associate, Security Operations Analyst Associate, or Azure Security Engineer Associate (AZ-500).
• Advanced security and compliance certifications such as CISSP, CISM, CCSP, or Security+.
• Experience in the legal, financial services, or other regulated industries with client data governance and compliance requirements.

Responsibilities

• Design, configure, and maintain Purview solutions for data classification, labeling, retention, and compliance.
• Implement and manage data security controls including DLP, Insider Risk Management, and eDiscovery workflows.
• Protect sensitive Client and Firm data across Microsoft 365, Azure, and integrated environments.
• Develop, enforce, and maintain compliance policies for regulatory, contractual, and Firm-specific data protection.
• Build automated data governance workflows enabling lifecycle management and defensible disposition of records.
• Integrate Purview insights into Security Operations, incident response, and GRC processes.

Skills

Microsoft Purview

Data governance

InfoSec

Regulatory compliance

Education

Bachelor’s degree in Computer Science or Information Security

Tools

Microsoft 365

Azure

Job description

Duties and Responsibilities

• Design, configure, and maintain Microsoft Purview solutions for data classification, labeling, retention, and compliance in alignment with Firm policies and regulatory requirements.
• Implement and manage data security controls, including Information Protection policies, Data Loss Prevention (DLP), Insider Risk Management, and eDiscovery workflows.
• Protect sensitive Client and Firm data through classification, labeling, encryption, access governance, and monitoring across Microsoft 365, Azure, and integrated environments.
• Develop, enforce, and maintain compliance policies, ensuring consistent application of regulatory, contractual, and Firm-specific data protection requirements.
• Build and optimize automated data governance workflows, enabling lifecycle management, secure data sharing, and defensible disposition of records.
• Integrate Purview insights and alerts into Security Operations, incident response, and GRC processes to strengthen visibility, detection, and remediation of data‑related risks.
• Collaborate with IT, Security, Legal, and Compliance teams to design policies and processes that balance regulatory obligations, client requirements, and business operations.
• Create and maintain documentation, standards, and procedures for data classification, retention, compliance reporting, and response to data‑related incidents.
• Monitor and respond to Purview compliance alerts, investigating potential risks such as data leakage, insider threats, or policy violations, and recommending remediation.
• Participate in risk assessments, audits, and compliance efforts related to data governance and regulatory frameworks (e.g., ISO 27001, GDPR, CCPA, HIPAA).
• Stay current with emerging data governance technologies, compliance regulations, and best practices, ensuring the Firm continues to mature its use of Microsoft Purview capabilities.

Education and/or Experience

• Required: Bachelor’s degree in Computer Science, Information Security, Information Governance, or a related field is required.
• Minimum of 5 years of experience in security engineering, compliance engineering, or data governance, with a strong focus on Microsoft 365 and Microsoft Purview solutions.
• Hands‑on experience implementing and managing Microsoft Purview capabilities such as Information Protection, Data Loss Prevention (DLP), Insider Risk Management, Records Management, and eDiscovery.
• Practical knowledge of Microsoft 365 security and compliance tools.
• Strong understanding of data governance principles, regulatory compliance requirements (e.g., GDPR, CCPA, HIPAA, ISO 27001), and information lifecycle management.
• Demonstrated ability to assess, troubleshoot, and remediate data protection, compliance, and information governance issues in Microsoft 365 environments.
• Preferred: Relevant Microsoft certifications such as Microsoft Certified: Information Protection Administrator Associate, Security Operations Analyst Associate, or Azure Security Engineer Associate (AZ-500).
• Advanced security and compliance certifications such as CISSP, CISM, CCSP, or Security+.
• Experience in the legal, financial services, or other highly regulated industries with strict client data governance and compliance requirements.
• undefined Hands‑on experience with data security and insider risk tools such as Varonis, Digital Guardian, or Cyberhaven undefined Familiarity with SIEM/SOAR platforms for correlating and responding to Purview alerts. undefined Demonstrated ability to support large‑scale legal hold, records management, and eDiscovery processes in global organizations. Strong knowledge of regulatory compliance frameworks such as GDPR, CCPA, HIPAA, ISO 27001, and client‑driven contractual requirements. Ability to script or automat process and routine functions and tasks

Other Skills and Abilities

• Strong organizational skills
• Strong attention to detail
• Good judgment and decision‑making skills
• Strong interpersonal and communication skills, both written and verbal
• Strong analytical and problem‑solving skills
• Ability to work harmoniously and effectively with others
• Ability to preserve confidentiality and exercise discretion
• Ability to work under pressure in a fast‑paced environment
• Ability to manage multiple projects with competing deadlines and priorities

The target salary range for this role is: $98,300 - $135,250 if located in Illinois.

Salaries vary by location and are based on numerous factors, including, but not limited to, the relevant market, skills, experience, and education of the selected candidate.

Our compensation package also includes bonus eligibility and a comprehensive benefits program. Benefits information can be found at Sidley.com/Benefits.

To perform this job successfully, an individual must be able to perform the Duties and Responsibilities above satisfactorily and meet the requirements.

The requirements listed above are representative of the minimum knowledge, skill, and/or ability required.

Reasonable accommodations will be made to enable individuals with disabilities to perform the essential functions of the job. If you need such an accommodation, please email [e-mail] (current employees should contact Human Resources).

Sidley Austin LLP is an Equal Opportunity Employer.

Sidley is an elite global law firm with a known reputation of deploying innovative strategies to achieve powerful results. Business professionals are essential to the firm’s ability to deliver the highest quality legal services to our clients. We are always looking for talented, motivated individuals who thrive in a performance‑driven culture to join our team.

We encourage you to explore current openings and check back for future opportunities that align with your skills, experience, and career goals.

Sidley employs approximately 2,300 lawyers working with our clients in complex transactional, restructuring, crisis management, investigation, regulatory, and litigation matters. Our 160 years of perspective and reach are truly global, supported by 21 offices strategically situated in key commercial, regulatory, and financial centers across the world. Our lawyers and business professionals, fluent in more than 75 languages, possess the cultural awareness and cross‑border legal acumen needed to bring clarity to a dynamic business landscape.