Remote GRC Engineer: Microsoft Purview & Data Governance

Saltu Staffing

New York (NY)

On-site

USD 120,000 - 160,000

Full time

12 days ago

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Saltu Staffing is seeking a Governance, Risk, and Compliance (GRC) Engineer with Microsoft Purview expertise to lead data governance, security, and compliance initiatives for our firm. This role designs, implements, and manages Purview solutions and Microsoft 365 security services to protect sensitive data and support eDiscovery.

The position is firmwide, full-time, exempt, remote, with offices in multiple cities.

Qualifications

Bachelor's degree in IT, CS, Law or related field required.
5–8 years of experience managing and securing Microsoft 365 environments.
Proven expertise with Microsoft Purview, Entra ID, Exchange Online, SharePoint Online, and Exchange On-Premises.
Strong understanding of legal hold, privacy regulations, and compliance standards.
Experience with Azure Information Protection and data-at-rest encryption (e.g., Thales HSMs).
Proficiency in PowerShell for automation and management tasks.
Familiarity with identity federation and business continuity planning.

Responsibilities

Implement, configure, and maintain Microsoft Purview components including Data Map, Unified Catalog, Information Protection, and Compliance Manager.
Design and execute legal hold strategies using Purview’s eDiscovery and retention capabilities.
Develop and enforce data governance policies and procedures.
Conduct regular audits and assessments of data practices and compliance posture.
Generate reports and insights using Power BI and Purview dashboards.
Implement information protection strategies to safeguard sensitive data across Microsoft 365 and Azure environments.
Configure and enforce Data Loss Prevention (DLP) policies to prevent unauthorized data sharing and leakage.
Establish and manage data retention policies to ensure regulatory adherence.
Monitor and manage insider threats and respond to security alerts and incidents.
Develop and implement data classification and labeling strategies.