Senior Remote Microsoft Information Protection & DLP Engineer

GovCIO; Frankfort (KY); Remote; USD 125,000 - 150,000; Full time

Benefits offered by this job

Employee Assistance Program (EAP)

Corporate Discounts

Learning & Development platform

Certification assistance

Referral Bonus Program

Internal Mobility Program

Pet Insurance

Flexible Work Environment

Job summary

GovCIO is seeking a Microsoft Information Protection Engineer to design, implement, and manage DLP and labeling controls across Microsoft 365. You will drive policy testing, incident response, and governance for enterprise AI initiatives, including Copilot.

This role requires strong experience with MIP, DLP, sensitivity labels, and compliance programs in large-scale environments. You will collaborate with security, compliance, and business stakeholders to ensure policies meet organizational

Qualifications

• Approximately 5 years of experience implementing and supporting Microsoft Information Protection technologies.
• Experience administering Microsoft Purview Data Loss Prevention (DLP).
• Experience with Microsoft Information Protection (MIP) and Sensitivity Labels.
• Experience with Microsoft 365 Compliance and Security solutions.
• Experience supporting CUI or similar information classification programs.
• Experience developing and maintaining data protection policies and controls.
• Knowledge of Microsoft 365 security architecture and compliance capabilities.
• Experience supporting security audits, regulatory assessments, or compliance programs.
• Strong analytical and troubleshooting skills.
• Excellent written and verbal communication skills.

Responsibilities

• Design, implement, maintain, and optimize Microsoft Purview DLP policies across Microsoft 365 services.
• Develop and tune DLP controls to protect sensitive organizational data from unauthorized disclosure or exfiltration.
• Analyze emerging technologies, including Microsoft Copilot, for impacts on DLP controls and security enhancements.
• Support implementation of DLP controls for new business applications and platforms.
• Perform policy testing, validation, and user acceptance before production deployment.
• Investigate and resolve DLP-related incidents, alerts, and user requests.
• Conduct periodic reviews of DLP policies for continued effectiveness and compliance.
• Collaborate with security, compliance, and business stakeholders to update DLP requirements.
• Administer and enhance Microsoft Purview Information Protection and Sensitivity Label programs.
• Design and manage sensitivity label taxonomies supporting CUI and data classification requirements.
• Develop and implement labeling strategies to improve data visibility and protection.
• Evaluate new Microsoft Information Protection features for deployment suitability.
• Support automated and manual document classification across large enterprise environments.
• Develop controls that integrate sensitivity labels with DLP policies and security tools.
• Assist with SharePoint Online and document library labeling implementations.
• Evaluate Microsoft Copilot security capabilities and information protection controls.
• Develop strategies leveraging labels and DLP to restrict Copilot access to sensitive information.
• Assess risks related to AI-enabled information access and propose mitigations.
• Support deployment planning and governance for enterprise AI initiatives.

Skills

Microsoft Purview DLP

Microsoft Information Protection

Sensitivity Labels

Microsoft 365 Compliance

CUI classification

Data protection policies

Education

Bachelor’s degree in IT, Cybersecurity, CS or related field

Tools

SharePoint Online

Job description

GovCIO is seeking a Microsoft Information Protection Engineer to design, implement, and manage DLP and labeling controls across Microsoft 365. You will drive policy testing, incident response, and governance for enterprise AI initiatives, including Copilot.

This role requires strong experience with MIP, DLP, sensitivity labels, and compliance programs in large-scale environments. You will collaborate with security, compliance, and business stakeholders to ensure policies meet organizational