IT Information Protection Analyst (Hybrid)
About The Position
The Information Protection Analyst serves as the technical subject matter resource for the IT Data Governance and Information Management Program, with primary responsibility for implementing, configuring, monitoring, and continuously improving Microsoft Purview-related controls and collaboration platform protections, particularly within SharePoint and related Microsoft 365 services. This role is responsible for translating governance and business requirements into enforceable technical configurations, policies, labels, rules, and monitoring practices that strengthen the protection of unstructured data across the environment. The position will support assessments, control validation, issue remediation, spot reviews, and ongoing monitoring to ensure the organization’s information protection capabilities are operating effectively and aligned to policy, business requirements, and risk expectations.
Requirements
- Strong working knowledge of Microsoft Purview, including information protection, labeling, governance-related capabilities, and policy administration.
- Strong knowledge of SharePoint Online, Microsoft 365 collaboration controls, document permissions, content handling, and administrative considerations.
- Understanding of unstructured data governance, records retention, access control, data handling restrictions, and audit/compliance support needs.
- Ability to configure technical controls based on documented business and governance requirements.
- Experience monitoring policy effectiveness, troubleshooting issues, and validating technical control operation.
- Strong analytical and documentation skills, including creation of standards, procedures, assessment findings, and technical evidence.
- Bachelor’s degree in Information Technology, Cybersecurity, Information Systems, Computer Science, or related discipline; or equivalent experience.
- Three (3) to five (5) years of relevant experience in Microsoft 365 administration, information protection, collaboration technologies, security controls, or related technical governance roles.
Nice To Haves
- Familiarity with PowerShell, reporting tools, dashboards, or automation approaches is preferred.
- Strong communication skills and ability to explain technical control concepts to non-technical stakeholders.
- Experience implementing or supporting Microsoft Purview, SharePoint security/configuration, or comparable information protection technologies preferred.
- Experience supporting compliance reviews, audits, technical assessments, or security-related remediation activities preferred.
- Microsoft certifications related to Purview, Microsoft 365, security, compliance, or SharePoint preferred.
Responsibilities
- Configure, implement, and maintain Microsoft Purview controls to support data governance, records management, and information protection objectives.
- Partner with business analysts, program leadership, cybersecurity, records, compliance, and infrastructure teams to translate governance requirements into technical policies and control designs.
- Establish and administer labels, rules, policy configurations, monitoring approaches, and exception handling processes related to sensitivity, retention, access, sharing, download/copy restrictions, and information protection.
- Provide technical support and subject matter expertise for SharePoint, Microsoft 365 collaboration environments, and related repositories as they relate to unstructured data governance and protection controls.
- Perform assessments of repositories, configurations, permissions, and usage patterns to identify risks, gaps, and enhancement opportunities.
- Monitor policy performance, investigate issues, track exceptions, and support remediation of control weaknesses or process breakdowns.
- Develop and maintain technical standards, implementation procedures, support guides, and evidence required for audit, compliance, and operational sustainability.
- Support discovery events, regulatory requests, cyber incidents, and internal/external audits by helping identify data locations, protections, control posture, and technical evidence.
- Participate in tabletop exercises, simulations, and readiness activities to improve organizational preparedness for information discovery and incident scenarios.
- Produce operational reporting and dashboards showing policy coverage, control adoption, exceptions, trends, and unresolved risks.
- Conduct on-the-spot reviews and environment assessments to validate control design and operating effectiveness.
- Recommend technical improvements, automation opportunities, and control enhancements to improve protection, usability, and governance maturity.
Benefits
- Competitive total rewards program
- Potential for incentive
- Salary is commensurate with your experience
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
