Security Engineer - Data Protection

Lockton•Kansas City, MO

48d

About The Position

Lockton is seeking a dedicated Security Engineer specializing in Data Protection. This role is focused on leveraging the Microsoft Purview suite to safeguard our organization's most critical data assets across our hybrid environment. The ideal candidate will be a subject matter expert in designing, implementing, and managing data-centric security controls within Microsoft Purview and Azure.

Responsibilities

Design, implement, and manage a comprehensive data protection strategy utilizing the Microsoft Purview governance and compliance portal.
Deploy and configure Microsoft Purview solutions, including Data Loss Prevention (DLP), Microsoft Information Protection (MIP) for data classification and sensitivity labeling, Insider Risk Management, and eDiscovery.
Develop and enforce data governance policies to discover, classify, and protect sensitive data across Microsoft 365, Azure, on-premises infrastructure, and other SaaS applications.
Create, tune, and monitor robust Data Loss Prevention (DLP) policies for endpoints, email, Microsoft Teams, and cloud applications to prevent data exfiltration.
Collaborate with business, legal, and compliance teams to translate data protection requirements into technical policies and controls.
Manage the configuration and lifecycle of sensitivity labels to ensure proper encryption, access control, and visual markings are applied to documents and emails.
Serve as the subject matter expert for data-related security incidents, using Purview tools for investigation, forensics, and response.
Monitor the effectiveness of data protection controls and provide regular reporting on compliance, risk posture, and policy enforcement to leadership.
Stay current with the latest advancements and threats in the data protection landscape and the evolution of the Microsoft Purview platform.
Actively coach and mentor other security and technology team members on data protection best practices.
Participate in the security team's on-call rotation and be available to respond to critical data security incidents outside of regular business hours.