DLP Senior Analyst - Purview

Sidley Austin LLP; Chicago (IL); Hybrid; USD 98,000 - 135,000; Full time

Benefits offered by this job

Bonus eligibility

Comprehensive benefits

Hybrid work model

Job summary

Sidley Austin LLP in Illinois seeks a Senior Analyst to design, implement, and manage Microsoft Purview for data classification, labeling, retention, and compliance aligned with firm policies. You will collaborate with Applications, Records Management, Data and AI, and Risk & Privacy teams to strengthen data protection, lifecycle management, and eDiscovery across Microsoft 365 and Azure.

Requirements: Bachelor's degree and 5+ years in security or data governance with Purview expertise;

Qualifications

• Bachelor’s degree and 5+ years in security engineering or data governance with Purview expertise.
• Strong knowledge of data governance, regulatory compliance, and lifecycle management.
• Experience with Microsoft Purview capabilities, including Information Protection, DLP, and retention.

Responsibilities

• Design, configure, and maintain Purview for data classification, labeling, retention, and compliance.
• Implement data security controls such as DLP, insider risk management, and eDiscovery workflows.
• Collaborate with cross-functional teams to monitor, respond to incidents, and improve governance.

Education

Bachelor’s degree

Tools

Microsoft Purview

Microsoft 365 security

SIEM/SOAR

eDiscovery

Job description

The DLP Senior Analyst - Purview is primarily responsible for designing, implementing, and managing the Firm’s data governance, compliance, and information protection solutions using Microsoft Purview. This individual will ensure that sensitive Client and Firm data is appropriately classified, labeled, monitored, and secured in alignment with regulatory requirements, contractual obligations, and Firm-specific policies. The Senior Analyst acts as a subject matter expert, collaborating with cross-functional teams — including our Applications Team, Records Management, Data and AI Team as well as Risk and Privacy —to establish robust data protection, lifecycle management, and eDiscovery processes. This role will also participate in incident response activities involving data loss prevention, insider risk, and compliance alerts, ensuring timely investigation, containment, and remediation. In addition, the Senior Microsoft Purview Engineer will contribute to the Firm’s overall Data Security and Compliance Strategy, driving the adoption of best practices and advanced capabilities within the Microsoft ecosystem.Duties and Responsibilities:Design, configure, and maintain Microsoft Purview solutions for data classification, labeling, retention, and compliance in alignment with Firm policies and regulatory requirements.Implement and manage data security controls, including Information Protection policies, Data Loss Prevention (DLP), Insider Risk Management, and eDiscovery workflows.Protect sensitive Client and Firm data through classification, labeling, encryption, access governance, and monitoring across Microsoft 365, Azure, and integrated environments.Develop, enforce, and maintain compliance policies, ensuring consistent application of regulatory, contractual, and Firm-specific data protection requirements.Build and optimize automated data governance workflows, enabling lifecycle management, secure data sharing, and defensible disposition of records.Integrate Purview insights and alerts into Security Operations, incident response, and GRC processes to strengthen visibility, detection, and remediation of data-related risks.Collaborate with IT, Security, Legal, and Compliance teams to design policies and processes that balance regulatory obligations, client requirements, and business operations.Create and maintain documentation, standards, and procedures for data classification, retention, compliance reporting, and response to data-related incidents.Monitor and respond to Purview compliance alerts, investigating potential risks such as data leakage, insider threats, or policy violations, and recommending remediation.Participate in risk assessments, audits, and compliance efforts related to data governance and regulatory frameworks (e.g., ISO 27001, GDPR, CCPA, HIPAA).Stay current with emerging data governance technologies, compliance regulations, and best practices, ensuring the Firm continues to mature its use of Microsoft Purview capabilities.Education and/or Experience:Required:Bachelor’s degree in Computer Science, Information Security, Information Governance, or a related field is required.Minimum of 5 years of experience in security engineering, compliance engineering, or data governance, with a strong focus on Microsoft 365 and Microsoft Purview solutions.Hands-on experience implementing and managing Microsoft Purview capabilities such as Information Protection, Data Loss Prevention (DLP), Insider Risk Management, Records Management, and eDiscovery.Practical knowledge of Microsoft 365 security and compliance toolsStrong understanding of data governance principles, regulatory compliance requirements (e.g., GDPR, CCPA, HIPAA, ISO 27001), and information lifecycle management.Demonstrated ability to assess, troubleshoot, and remediate data protection, compliance, and information governance issues in Microsoft 365 environmentsPreferred:Relevant Microsoft certifications such as Microsoft Certified: Information Protection Administrator Associate, Security Operations Analyst Associate, or Azure Security Engineer Associate (AZ-500).Advanced security and compliance certifications such as CISSP, CISM, CCSP, or Security+.Experience in the legal, financial services, or other highly regulated industries with strict client data governance and compliance requirements.undefinedHands-on experience with data security and insider risk tools such as Varonis, Digital Guardian, or CyberhavenundefinedFamiliarity with SIEM/SOAR platforms for correlating and responding to Purview alerts.undefinedDemonstrated ability to support large-scale legal hold, records management, and eDiscovery processes in global organizations.Strong knowledge of regulatory compliance frameworks such as GDPR, CCPA, HIPAA, ISO 27001, and client-driven contractual requirements.Ability to script or automat process and routine functions and tasksOther Skills and Abilities:The following will also be required of the successful candidate:Strong organizational skillsStrong attention to detailGood judgment and decision-making skillsStrong interpersonal and communication skills, both written and verbalStrong analytical and problem-solving skillsAbility to work harmoniously and effectively with othersAbility to preserve confidentiality and exercise discretionAbility to work under pressure in a fast-paced environmentAbility to manage multiple projects with competing deadlines and priorities#LI-OE1#LI-HybridThe target salary range for this role is:$98,300 - $135,250 if located in Illinois.Salaries vary by location and are based on numerous factors, including, but not limited to, the relevant market, skills, experience, and education of the selected candidate. Our compensation package also includes bonus eligibility and a comprehensive benefits program. Benefits information can be found at Sidley.com/Benefits .To perform this job successfully, an individual must be able to perform the Duties and Responsibilities above satisfactorily and meet the requirements. The requirements listed above are representative of the minimum knowledge, skill, and/or ability required. Reasonable accommodations will be made to enable individuals with disabilities to perform the essential functions of the job. If you need such an accommodation, please email [e-mail] (current employees should contact Human Resources).Sidley Austin LLP is an Equal Opportunity Employer.