Information Protection & AI Governance Engineer

Infosys

About The Position

The Infosys Financial Services unit is a global leader in driving digital transformation for financial institutions. We specialize in leveraging advanced technologies such as AI, cloud, and data-led innovation to help our clients accelerate growth and unlock business value. Our AI-driven solutions empower financial institutions to make smarter decisions, enhance customer experiences, and achieve operational excellence. Join us to be part of a pioneering team that is at the forefront of financial services transformation. You'll have the opportunity to work with cutting-edge AI technologies, collaborate with industry experts, and contribute to transformative projects across banking, wealth management, and insurance sectors. If you're passionate about AI and eager to make a significant impact, the Infosys Financial Services unit is the perfect place for you to grow and excel.

Requirements

Design, deploy, configure, and optimize Microsoft Purview Information Protection, Data Loss Prevention (DLP), Data Lifecycle Management, Information Governance, and Compliance solutions.
Develop and tune sensitivity labels, auto-labeling policies, DLP policies, and data classification strategies.
Integrate Purview with Microsoft 365, Azure, and third-party security technologies.
Design, implement, and continuously tune AI guardrails for enterprise AI platforms, including Microsoft Copilot and other Generative AI solutions.
Develop governance controls that minimize data leakage, prompt injection risks, oversharing, and unauthorized AI usage.
Configure policy controls for responsible AI usage aligned with organizational security and compliance requirements.
Partner with business and technical teams to safely enable AI adoption while maintaining regulatory compliance.
Evaluate emerging AI governance technologies and recommend improvements to enterprise AI security architecture.
Configure, tune, and optimize Microsoft Purview Insider Risk Management policies.
Develop detection logic for insider threats, data exfiltration, policy violations, and anomalous user behavior.
Analyze insider risk alerts and improve detection fidelity through continuous tuning and policy refinement.
Collaborate with Security Operations, Incident Response
Reduce false positives while improving detection accuracy through ongoing analytics and operational feedback.
Develop automation using PowerShell, Microsoft Graph API, KQL, or similar technologies.
Create dashboards, metrics, and executive reporting for compliance and insider risk programs.
Develop operational documentation, standards, and engineering runbooks.
Bachelor’s degree or foreign equivalent required from an accredited institution. Will also consider three years of progressive experience in the specialty in lieu of every year of education.

Nice To Haves

Experience designing and tuning AI governance controls and guardrails for enterprise AI platforms.
Experience developing insider threat detection strategies and policy tuning.
Understanding of Microsoft 365 Security and Compliance ecosystem.
Experience with Microsoft Defender, Entra ID (Azure AD), Microsoft Sentinel, and Microsoft Graph.
Microsoft Certified: Information Protection Administrator Associate (SC-400)
Microsoft Certified: Cybersecurity Architect Expert (SC-100)
Microsoft Certified: Security Operations Analyst (SC-200)
Microsoft Certified: Security Administrator (SC-300)
CISSP, CISM, GIAC, or similar industry certifications
Experience with Microsoft Copilot governance and security controls
Experience with Microsoft Defender XDR and Microsoft Sentinel
Experience supporting regulated industries or highly sensitive enterprise environments
Microsoft Purview
Microsoft 365 Compliance
Microsoft Information Protection
Data Loss Prevention (DLP)
Insider Risk Management
Communication Compliance
Microsoft Entra ID
Microsoft Graph API
PowerShell
Azure
AI Governance
Responsible AI
Generative AI Security
Data Classification
Information Governance

Responsibilities

Collaborate with internal and client teams to resolve complex incidents, conduct root cause analyses, and document findings with preventive recommendations
Participate in evaluation of client IT infrastructure, prepare actionable assessment reports, and support due diligence to document infrastructure maturity and improvement opportunities
Contribute to the design of scalable, cost-effective IT infrastructure solutions, review reusable components, and develop technical documentation for deployed systems
Align release schedules and environment readiness, execute deployments as per protocols, perform post-deployment testing, and manage version control to track changes
Co-ordinate maintenance schedules, emergency fixes, and technology upgrades while ensuring uninterrupted integration into existing systems and processes
Facilitate performance data analysis across systems, coordinate insights on system behavior, and support capacity planning to optimize performance
Conduct security checks, recovery drills, and compliance audits, implement security measures, and coordinate continuity plans to maintain adherence to standards
Gather feedback to identify automation opportunities, analyze existing infrastructure processes, and propose enhancements for efficiency gains
Act as liaison with onsite, offshore, and vendor teams to document project requirements, ensuring effective collaboration
Develop a centralized repository of technical and procedural knowledge, leveraging insights from other projects to drive efficiency and retain organizational expertise
Design, deploy, configure, and optimize Microsoft Purview Information Protection, Data Loss Prevention (DLP), Data Lifecycle Management, Information Governance, and Compliance solutions.
Develop and tune sensitivity labels, auto-labeling policies, DLP policies, and data classification strategies.
Integrate Purview with Microsoft 365, Azure, and third-party security technologies.
Design, implement, and continuously tune AI guardrails for enterprise AI platforms, including Microsoft Copilot and other Generative AI solutions.
Develop governance controls that minimize data leakage, prompt injection risks, oversharing, and unauthorized AI usage.
Configure policy controls for responsible AI usage aligned with organizational security and compliance requirements.
Partner with business and technical teams to safely enable AI adoption while maintaining regulatory compliance.
Evaluate emerging AI governance technologies and recommend improvements to enterprise AI security architecture.
Configure, tune, and optimize Microsoft Purview Insider Risk Management policies.
Develop detection logic for insider threats, data exfiltration, policy violations, and anomalous user behavior.
Analyze insider risk alerts and improve detection fidelity through continuous tuning and policy refinement.
Collaborate with Security Operations, Incident Response
Reduce false positives while improving detection accuracy through ongoing analytics and operational feedback.
Develop automation using PowerShell, Microsoft Graph API, KQL, or similar technologies.
Create dashboards, metrics, and executive reporting for compliance and insider risk programs.
Develop operational documentation, standards, and engineering runbooks.