MS Purview AI & Data Protection Engineer

INSPYR Solutions•Lewisville, TX

14h

About The Position

The AI and Data Protection Engineer designs, implements, and maintains the organization’s data loss prevention (DLP) and information protection program, focusing on Microsoft Purview and the security of AI-assisted tools such as Microsoft Copilot and Claude. The role connects data security engineering with regulatory compliance, helping ensure sensitive data is classified, monitored, and protected in line with ISO 27001, GDPR, and, where applicable, PIPL, while supporting safe and compliant adoption of generative AI. The engineer works with IT, legal, and business stakeholders to establish data governance standards for AI-generated content and AI-assisted workflows. The role also supports the organization’s information security management system, privacy compliance, employee awareness, incident remediation, and audit and executive reporting. Within the first year, the engineer is expected to implement mature DLP and Purview controls across key data channels, establish governance for AI tool usage, and improve readiness to demonstrate compliance with ISO 27001, GDPR, and PIPL requirements.

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
Hands-on experience with one or more DLP products, such as Microsoft Purview DLP, Symantec/Broadcom DLP, Forcepoint, or Netskope.
Demonstrated expertise with Microsoft Purview, including sensitivity labels, data loss prevention, information protection, and compliance features.
Working knowledge of ISO 27001 requirements and experience supporting ISMS documentation, audits, or certification efforts.
Solid understanding of GDPR requirements and practical experience applying them in a corporate environment.
Understanding of data protection considerations for generative AI tools, specifically Microsoft Copilot and Claude, including data residency, prompt and output handling, and enterprise administrative controls.
Strong analytical, documentation, and communication skills, including the ability to explain technical risk in business terms to non-technical stakeholders.
Must be a U.S. citizen, Green Card holder, or otherwise authorized to work in the U.S.

Nice To Haves

Familiarity with China’s Personal Information Protection Law (PIPL) and its implications for cross-border data transfer and processing.
Certifications such as CIPP/E, CIPT, CISSP, CISM, or ISO 27001 Lead Implementer/Auditor.
Experience with other Microsoft 365 security and compliance tools, such as Defender for Cloud Apps, Insider Risk Management, or eDiscovery.
Prior experience developing AI governance or acceptable-use policies for enterprise generative AI deployments.

Responsibilities

Design, deploy, and maintain DLP policies and controls across endpoints, email, cloud storage, and SaaS applications.
Administer and optimize Microsoft Purview, including sensitivity labels, data classification, insider risk management, information barriers, retention policies, and Compliance Manager assessments.
Establish and maintain data protection guardrails for Microsoft Copilot, Claude, and other AI tools, including leakage prevention, prompt and response monitoring, access controls, and acceptable-use policies.
Partner with IT, legal, and business stakeholders to define data handling and governance standards for AI-generated content and AI-assisted workflows.
Conduct data discovery and classification to identify and protect sensitive, confidential, and regulated data across on-premises and cloud environments.
Monitor DLP and Purview alerts, investigate policy violations, and drive remediation of data protection incidents.
Maintain and support the organization’s ISO 27001 information security management system, including control documentation, internal audits, and continuous improvement.
Support GDPR compliance, including data mapping, data subject access requests, and privacy-by-design principles.
Support PIPL compliance where the organization processes data connected to Chinese data subjects or operations.
Develop and deliver employee and stakeholder training and awareness materials on data protection, DLP, and safe AI usage.
Monitor emerging AI governance frameworks, data protection regulations, and DLP and Purview capabilities; recommend program enhancements.
Prepare reports, dashboards, and documentation for audits, regulators, and executive leadership.