Remote MIP & DLP Engineer | Purview, AI Security

GovCIO; Jackson (MS); Remote; USD 125,000 - 150,000; Full time

Benefits offered by this job

Employee Assistance Program

Corporate Discounts

Learning & Development platform

Training, Education and Certification

Referral Bonus Program

Internal Mobility Program

Pet Insurance

Flexible Work Environment

Job summary

GovCIO is seeking a Microsoft Information Protection Engineer to design, implement, and optimize DLP policies, sensitivity labels, and information protection controls across enterprise environments. The role focuses on safeguarding sensitive data while enabling secure collaboration and productivity.

The ideal candidate has approximately five years of experience with DLP, sensitivity labels, data classification, compliance monitoring, and security policy implementation.

Qualifications

• Approximately 5 years of experience implementing and supporting Microsoft Information Protection technologies.
• Experience administering:
• Microsoft Purview Data Loss Prevention (DLP)
• Microsoft Information Protection (MIP)
• Sensitivity Labels
• Microsoft 365 Compliance and Security solutions
• Experience supporting CUI or similar information classification programs.
• Experience developing and maintaining data protection policies and controls.
• Knowledge of Microsoft 365 security architecture and compliance capabilities.
• Experience supporting security audits, regulatory assessments, or compliance programs.
• Strong analytical and troubleshooting skills.
• Excellent written and verbal communication skills.

Responsibilities

• Design, implement, maintain, and optimize Microsoft Purview DLP policies across Microsoft 365 services.
• Develop and tune DLP controls to protect sensitive organizational data from unauthorized disclosure, accidental sharing, or data exfiltration.
• Analyze emerging technologies, including Microsoft Copilot, to assess impacts on existing DLP controls and recommend appropriate security enhancements.
• Support implementation of DLP controls for new business applications and platforms.
• Perform policy testing, validation, and user acceptance activities prior to production deployment.
• Investigate and resolve DLP-related incidents, alerts, and user support requests.
• Conduct periodic reviews of DLP policies to ensure continued effectiveness and compliance with organizational requirements.
• Collaborate with security, compliance, and business stakeholders to define and update DLP requirements.
• Administer and enhance Microsoft Purview Information Protection and Sensitivity Label programs.
• Design and manage sensitivity label taxonomies supporting CUI and other data classification requirements.
• Develop and implement labeling strategies to improve enterprise data visibility and protection.
• Evaluate new Microsoft Information Protection features and determine suitability for organizational deployment.
• Support automated and manual document classification initiatives across large-scale enterprise environments.
• Develop controls that integrate sensitivity labels with DLP policies and other security technologies.
• Assist with SharePoint Online and document library labeling implementations.
• Evaluate Microsoft Copilot security capabilities and information protection controls.
• Develop strategies that leverage sensitivity labels and DLP policies to restrict access to sensitive information within Copilot prompts and responses.
• Assess risks related to AI-enabled information access and recommend mitigation approaches.
• Support deployment planning and governance activities related to enterprise AI initiatives.
• Support FISMA, OIG, and other compliance-related assessments.
• Assist in developing, testing, and deploying remediation efforts for audit findings.
• Create and maintain compliance evidence, system documentation, and security artifacts.
• Support development and testing of custom Sensitive Information Types (SITs) to meet organizational requirements.
• Collaborate with auditors, compliance personnel, and system owners during assessments and reviews.
• Contribute to NIST 800-53 control implementation and evidence collection activities
• Develop and maintain reporting solutions that provide visibility into DLP effectiveness, CUI adoption, and information protection trends.
• Create dashboards and metrics supporting executive and operational decision-making.
• Analyze security, labeling, and policy usage data to identify improvement opportunities.
• Support migration or modernization efforts associated with reporting platforms and analytics tools.
• Participate in regular meetings with customers, security teams, compliance personnel, and Microsoft representatives.
• Provide technical guidance and recommendations regarding information protection best practices.
• Support end-user adoption efforts through documentation, troubleshooting, and knowledge transfer.

Job description

GovCIO is seeking a Microsoft Information Protection Engineer to design, implement, and optimize DLP policies, sensitivity labels, and information protection controls across enterprise environments. The role focuses on safeguarding sensitive data while enabling secure collaboration and productivity.

The ideal candidate has approximately five years of experience with DLP, sensitivity labels, data classification, compliance monitoring, and security policy implementation.