Senior Information Protection & AI Governance Engineer

Think Consulting; Atlanta (GA); On-site; USD 140,000 - 190,000; Full time

Job summary

Think Consulting is seeking a Senior Information Protection & AI Governance Engineer to lead enterprise data protection, AI governance, and insider risk programs. You will design and optimize Microsoft Purview capabilities, implement governance controls for AI platforms, and enhance insider risk detection to safeguard sensitive information while enabling responsible innovation.

The ideal candidate combines deep expertise in Microsoft security technologies with governance, risk, and security

Qualifications

• Bachelor's degree or equivalent experience in a relevant field.
• 7+ years in enterprise cybersecurity or security engineering.
• 5+ years implementing Microsoft Purview.
• Experience with Purview, DLP, Insider Risk, and data classification.
• Experience in AI governance for enterprise platforms.

Responsibilities

• Design, implement, and optimize Purview Information Protection, DLP, and Governance solutions.
• Develop sensitivity labels, automated classification policies, and data labeling strategies.
• Enhance governance frameworks to meet compliance requirements.
• Integrate Purview with M365, Azure, and other platforms.
• Design governance frameworks and guardrails for AI platforms.
• Develop controls for data exposure, oversharing, prompt injection, and misuse.
• Establish policies and monitoring for responsible AI adoption.
• Collaborate with stakeholders to enable secure AI innovation.
• Evaluate AI governance technologies and best practices.
• Configure and optimize Purview Insider Risk Management.

Skills

Governance

Cross-functional collaboration

Analytical thinking

Education

Bachelor's degree in CS/CSS/IS or related field

Tools

Microsoft Purview

Microsoft Defender

Microsoft Entra ID

Microsoft Sentinel

PowerShell

Microsoft Graph API

Job description

Position Summary

We are seeking a Senior Information Protection & AI Governance Engineer to lead the strategy, engineering, and operational management of enterprise data protection, AI governance, and insider risk programs. This role will be instrumental in designing and optimizing Microsoft Purview capabilities, implementing governance controls for enterprise AI platforms, and enhancing insider risk detection to safeguard sensitive information while enabling responsible innovation.

The ideal candidate combines deep expertise in Microsoft security and compliance technologies with strong governance, risk, and security engineering experience. This individual will partner across security, compliance, legal, and business teams to balance data protection, regulatory requirements, user productivity, and secure AI adoption.

Key Responsibilities

Information Protection & Microsoft Purview Engineering

• Design, implement, and optimize Microsoft Purview Information Protection, Data Loss Prevention (DLP), Information Governance, Data Lifecycle Management, and Compliance solutions.
• Develop and maintain sensitivity labels, automated classification policies, data labeling strategies, and DLP controls.
• Enhance enterprise data governance frameworks and ensure alignment with organizational compliance requirements.
• Integrate Microsoft Purview with Microsoft 365, Azure, and other security and compliance platforms.
• Continuously assess and improve data protection capabilities to reduce risk and strengthen governance.

AI Governance & Security Controls

• Design and implement governance frameworks and security guardrails for Microsoft Copilot and other Generative AI platforms.
• Develop controls that mitigate risks associated with data exposure, oversharing, prompt injection, and unauthorized AI usage.
• Establish policies, monitoring capabilities, and governance processes that support responsible AI adoption.
• Partner with business and technology stakeholders to enable secure AI innovation while maintaining regulatory and compliance standards.
• Evaluate emerging AI governance technologies, trends, and best practices to strengthen enterprise AI security strategies.

Insider Risk Management & Threat Detection

• Configure, manage, and optimize Microsoft Purview Insider Risk Management capabilities.
• Develop and refine detection policies for insider threats, data exfiltration, policy violations, and anomalous user behavior.
• Analyze insider risk alerts, improve detection accuracy, and enhance overall program effectiveness through continuous tuning.
• Collaborate with Security Operations, Incident Response, Legal, Human Resources, and Compliance teams to investigate and address identified risks.
• Leverage analytics and operational insights to reduce false positives and improve threat detection fidelity.

Security Engineering & Automation

• Develop automation and operational efficiencies using PowerShell, Microsoft Graph API, KQL, and related technologies.
• Build dashboards, metrics, and reporting solutions to measure compliance, information protection, and insider risk program effectiveness.
• Create and maintain technical standards, engineering documentation, operational procedures, and support runbooks.
• Contribute to continuous security improvement initiatives across the Microsoft security and compliance ecosystem.

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Information Security, or a related field, or equivalent experience.
• 7+ years of experience in enterprise cybersecurity, information protection, compliance, or security engineering.
• 5+ years of hands-on experience implementing and administering Microsoft Purview.
• Proven experience with:
  • Microsoft Purview Information Protection
  • Data Loss Prevention (DLP)
  • Insider Risk Management
  • Communication Compliance
  • Data Classification and Sensitivity Labels
  • Information Governance
• Experience implementing AI governance frameworks and security controls for enterprise AI platforms.
• Strong understanding of insider threat detection, risk analytics, and policy optimization.
• Experience working within the Microsoft 365 Security and Compliance ecosystem.
• Hands-on experience with Microsoft Defender, Microsoft Entra ID, Microsoft Sentinel, and Microsoft Graph.
• Strong analytical, problem-solving, and cross-functional collaboration skills.

Preferred Qualifications

• Microsoft Certified: Information Protection Administrator Associate (SC-400)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• CISSP, CISM, GIAC, or comparable industry certifications.
• Experience governing and securing Microsoft Copilot and other AI-enabled workplace technologies.
• Experience with Microsoft Defender XDR and advanced threat detection programs.
• Experience supporting highly regulated industries or complex enterprise environments.
• Familiarity with enterprise risk management, privacy, and compliance frameworks.

Technical Skills

• Microsoft Purview
• Microsoft Information Protection
• Microsoft 365 Compliance
• Data Loss Prevention (DLP)
• Insider Risk Management
• Communication Compliance
• Data Classification & Governance
• Microsoft Entra ID
• Microsoft Sentinel
• Microsoft Defender XDR
• Microsoft Graph API
• PowerShell
• Azure Security & Compliance
• AI Governance & Responsible AI
• Generative AI Security
• Information Governance & Data Protection

Equal Opportunity Employer, including disability and protected veteran status