Sr. Consultant, Microsoft Purview – Data Security & Governance

iVision Scale LLC•Atlanta, GA

11h•$150,000 - $175,000•Hybrid

About The Position

As a Microsoft Purview Senior Consultant at ivision, you will join our Consulting Services team within the Modern Work, Cloud & AI (MCA) Practice to help enterprise clients classify, protect, govern, and monitor the information their business depends on. Working alongside our Sales, Pre-Sales, and Delivery teams, you will lead hands-on delivery of data security assessments, Purview design and proof-of-value engagements, Copilot readiness work, and tenant-to-tenant Purview consolidations — translating data security governance requirements into enforceable policy and configuration. You will work across multiple verticals and partner closely with ivision Architects, Principal Consultants, and Managed Services engineers to deliver high-quality, repeatable, defensible data protection outcomes.

Requirements

6+ years of hands-on experience delivering data security, compliance, or information governance solutions on Microsoft 365, with deep focus on Microsoft Purview.
Deep practical experience with: Microsoft Purview Information Protection — sensitivity labels, label policies, auto-labeling, encryption, and rights management.
Deep practical experience with: Data Loss Prevention — M365 workload policies, custom and template rule sets, sensitive information types, trainable classifiers, and policy tuning to reduce false positives.
Deep practical experience with: Endpoint DLP — Defender for Endpoint onboarding dependencies, device policy scoping, and staged enforcement.
Deep practical experience with: Insider Risk Management — policy scope, indicators, role groups, and case triage design.
Deep practical experience with: Data Lifecycle / Records Management — retention policies, retention labels, and disposition.
Deep practical experience with: Microsoft Purview eDiscovery (current portal experience) — cases, searches, holds, review sets, and export.
Microsoft 365 platform fluency — Exchange Online, SharePoint Online, OneDrive for Business, Teams, and Entra ID, including permissions and external sharing models.
Licensing fluency — E3 vs. E5 / E5 Compliance entitlements, Purview add-ons, SharePoint Advanced Management, and Entra ID Governance prerequisites.
PowerShell and Microsoft Graph for Purview and Security & Compliance administration and reporting.
Demonstrated ability to lead a workstream independently, manage client stakeholders across IT, security, legal, compliance, and business functions, and produce client-ready design documentation.
Experience contributing to SOWs, scoping toolkits, and LOE estimation for data security and governance engagements.
Strong consultative communication skills with technical and business audiences.
Collaborative mindset; thrives in a geographically distributed delivery team and is comfortable mentoring junior engineers.
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent experience.
SC-401 or SC-400 — Information Security Administrator Associate (required)
Familiarity with ITIL, agile delivery, and PMP practices is a plus.
Working knowledge of regulatory frameworks (HIPAA, PCI-DSS, GDPR, CMMC) and maturity models such as the Microsoft 365 Maturity Model and the CISA Zero Trust data pillar is a plus.

Nice To Haves

SC-100 — Microsoft Cybersecurity Architect Expert (strongly preferred)
SC-200 — Security Operations Analyst Associate (preferred for Insider Risk / alert-triage-heavy engagements)
MS-102 — Microsoft 365 Administrator Expert (preferred)
AZ-500 — Azure Security Engineer Associate (preferred for engagements extending Purview beyond M365)

Responsibilities

Lead data security governance discovery — classification taxonomy, sensitive information types, data handling requirements, and control frameworks across the data lifecycle (creation, storage, use, transmission, archival, deletion).
Design and deploy Microsoft Purview Information Protection — sensitivity label taxonomy, sub-labels, label publishing policies, encryption and rights management settings, content marking, and auto-labeling.
Design and deploy Data Loss Prevention across Exchange Online, SharePoint Online, OneDrive for Business, and Teams — policy and rule authoring, sensitive info type and confidence tuning, policy tips, incident reporting, and staged promotion from simulation to audit to block-with-override.
Implement Endpoint DLP where device onboarding to Microsoft Defender for Endpoint, OS, and telemetry prerequisites are in place.
Configure Insider Risk Management — global settings, indicator and threshold tuning, role groups, triage workflow, and privacy considerations.
Deliver Data Lifecycle and Records Management — retention labels and policies, disposition review, and records configuration planning.
Execute DSPM and AI data readiness work — oversharing and permissions-hygiene analysis, sensitive data exposure review, SharePoint Restricted Content Discovery / Restricted Access Control, and guardrails that make Microsoft 365 Copilot rollout defensible.
Run current-state Purview assessments — policy deployment health, false-positive analysis, classifier and confidence-level evaluation, adaptive scope drift, and administrative role review — producing prioritized, risk-ranked remediation plans.
Deliver Purview tenant-to-tenant consolidations — inventory source configuration, perform gap analysis, map policies and labels to the target tenant, and validate functional parity post-migration.
Produce client-ready deliverables: Summary of Findings, Purview Design Report, Implementation Roadmap, As-Built documentation, and executive readouts.
Lead knowledge transfer and adoption enablement — administrator sessions, user orientation, how-to guides, and communication assets.
Support pre-sales activities: scoping calls, LOE estimation, SOW contribution, and technical responses for assessment, POV, implementation, and Copilot-readiness opportunities.
Mentor mid- and junior-level consultants and contribute to ivision's service catalog, scoping toolkits, and delivery standardization efforts.