Job Title: Microsoft Purview SME - FedRAMP / NIST 800-53
Duration: 12 Months (Full-Time)
Eligible Work Authorization: US Citizens (USC) or Green Card Holders (GC) Only
Pay Rate: $70-$80/hr. on 1099
Job Description
We are seeking an experienced Microsoft Purview Subject Matter Expert (SME) with strong expertise in data governance, data security, compliance, and regulatory frameworks, particularly FedRAMP and NIST 800-53.
The ideal candidate will have hands-on experience implementing, configuring, and managing Microsoft Purview solutions in highly regulated environments. This individual will be responsible for ensuring data protection, information governance, compliance, and security controls align with federal regulatory requirements.
Key Responsibilities
- Serve as the subject matter expert for Microsoft Purview, providing technical guidance on data governance, compliance, and information protection.
- Design, implement, and manage Microsoft Purview solutions, including Data Loss Prevention (DLP), Information Protection, Data Lifecycle Management, and Data Governance.
- Configure and manage sensitivity labels, retention policies, data classification, and protection policies across Microsoft 365 environments.
- Ensure Microsoft Purview configurations and security controls align with FedRAMP requirements and NIST SP 800-53 control families.
- Map Microsoft Purview capabilities and configurations to applicable NIST 800-53 security and privacy controls.
- Support compliance assessments, security audits, control implementation, and evidence collection.
- Identify data security and compliance gaps and recommend remediation strategies.
- Work closely with cybersecurity, cloud security, compliance, and IT teams to establish and maintain data protection standards.
- Develop technical documentation, compliance procedures, and implementation guidelines.
- Provide SME-level guidance on Microsoft Purview capabilities, best practices, and regulatory compliance requirements.
Required Qualifications
- Strong hands-on experience with Microsoft Purview in enterprise environments.
- In-depth understanding of Microsoft Purview capabilities, including:
- Information Protection and Sensitivity Labels
- Data Classification and Data Discovery
- Data Lifecycle Management and Retention Policies
- Audit and Compliance Management
- Strong working knowledge of FedRAMP compliance requirements.
- Hands-on experience with NIST SP 800-53 security and privacy controls.
- Experience mapping technical security controls to NIST 800-53 requirements.
- Understanding of cloud security, data governance, information protection, and regulatory compliance.
- Experience supporting security assessments, audits, compliance documentation, and remediation activities.
- Strong communication, documentation, and stakeholder management skills.