{"id":3397064,"url":"https://alion.io/job/onit-senior-data-security-engineer-purview-ai-governance","title":"Senior Data Security Engineer - Purview & AI Governance","company":{"id":58716,"name":"Onit","domain":"onit.com","url":"https://alion.io/company/onit","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":86,"open_postings":4,"ghost_share":0,"stale_share":0.75,"repost_share":0,"time_to_fill_p50_days":19,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":15500,"max_usd":33000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":9,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anthropic","optional":false},{"name":"Claude","optional":false},{"name":"Copilot","optional":false},{"name":"Cursor","optional":false},{"name":"DLP","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"OneDrive","optional":false},{"name":"PowerShell","optional":false},{"name":"SharePoint","optional":false},{"name":"GDPR","optional":true},{"name":"ISO 27001","optional":true},{"name":"NIST AI RMF","optional":true}],"status":"live","first_seen_at":"2026-10-16T08:54:48Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-11-05T20:04:26Z","board_verified":true,"closed_at":null,"days_open":20,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":20},"description":"What This Role Is Expected to Deliver\nBuild and mature Onit's Microsoft Purview information protection and DLP capabilities across Microsoft 365 and endpoints.\nImprove protection of sensitive data across SharePoint, OneDrive, Teams and endpoints, including labeling, access/oversharing risk and data lifecycle controls.\nMake the Microsoft 365 data estate safer for generative AI and other approved AI tools and use cases by understanding what AI can access and where sensitive data may be exposed.\nTranslate emerging AI/data-governance requirements into practical technical controls, operating processes and measurable improvements.\nImplement and operationalize any CASB, SSPM, DSPM and Shadow AI discovery/governance solutions to identify risk, enforce controls, remediate exposure and improve SaaS/AI security posture.\nKey Responsibilities\nDesign, implement, tune and operate Microsoft Purview Data Loss Prevention (DLP), including Microsoft 365 and Endpoint DLP scenarios.\nOwn Microsoft Purview Information Protection capabilities including sensitivity labels, publishing policies, auto-labeling, Sensitive Information Types (SITs), trainable/classification concepts and policy tuning.\nImplement and support retention, records/data lifecycle, legal hold, Content Search, Core/Advanced eDiscovery workflows, audit and evidence-preservation processes where required.\nPartner with business, legal, privacy, security and IT stakeholders to translate data-protection requirements into workable Purview policies without creating excessive user friction or false positives.\nAssess and improve sensitive-data exposure across SharePoint, OneDrive and Teams, including oversharing, external sharing, broad group access and inherited/direct permissions in collaboration with M365 platform owners.\nSupport data-security readiness for Microsoft Copilot, Claude, Anthropic, Cursor and other enterprise AI tools by identifying sensitive content exposure, access pathways and control gaps before broader AI enablement.\nDevelop capability in AI data security and governance areas such as DSPM for AI, Shadow AI discovery, sanctioned/unsanctioned AI use, prompt/data leakage risk, AI application inventory and policy/control mapping.\nWork with CASB/SSE/SASE or SaaS discovery capabilities where they contribute to identifying Shadow AI/Shadow IT and controlling risky data movement; deep SAM/licensing expertise is not a requirement for this role.\nUse PowerShell, Microsoft Graph and Microsoft 365 reporting capabilities to automate policy validation, reporting, investigation support and recurring operational tasks.\nOwn complex L3 troubleshooting for Purview/DLP policy behavior, classification, labeling, endpoint DLP, eDiscovery/legal-hold and Microsoft 365 data-protection issues.\nEvaluate new Microsoft Purview, Copilot security and AI-governance capabilities through structured lab/POV testing and recommend production adoption based on risk reduction and operational value.\nCreate technical designs, SOPs, runbooks and decision records; mentor IT team members and transfer data-security knowledge across the team.\nLead data-security and AI-governance projects from requirements and pilot through rollout, change communication, validation and steady-state handover.\nRequired Skills - Must Have\nStrong hands-on Microsoft Purview experience in an enterprise Microsoft 365 environment.\nHands-on DLP experience, including policy design/tuning and practical understanding of false positives, exceptions and business impact.\nStrong Information Protection experience: sensitivity labels, publishing, auto-labeling and classification/Sensitive Information Type concepts.\nHands-on experience with retention, legal hold/eDiscovery, audit or related Microsoft Purview data lifecycle/investigation capabilities.\nMicrosoft Purview DSPM / Data Security Posture Management and AI data-security capabilities.\nCASB/SSE/SASE, Shadow IT or Shadow AI discovery/control concepts.\nStrong understanding of SharePoint, OneDrive and Teams as data repositories and how permissions/sharing affect data security.\nWorking Microsoft Entra ID knowledge sufficient to understand identity, group membership and access dependencies that affect data protection.\nStrong L3 troubleshooting and analytical skills across Purview, Microsoft 365 and data-security controls.\nAbility to independently plan and execute technical projects/changes, including requirements, pilot, stakeholder communication, risk management, validation and documentation.\nStrong written and verbal communication, particularly the ability to explain data-security controls to technical and non-technical stakeholders.\nAdjacent Skills - Good to Have / Learn Quickly\nLeading AI Tools security/readiness, generative-AI data exposure assessment or AI application governance.\nAI governance frameworks such as ISO/IEC 42001, NIST AI RMF, Responsible AI principles or similar governance models.\nPowerShell and Microsoft Graph automation for Microsoft 365/Purview operations.\nPrivacy/regulatory environments such as GDPR and ISO 27001; exposure to legal/compliance workflows is useful.\nSaaS discovery, SSPM or SAM concepts are useful adjacent knowledge.\nDemonstrates learnability: can move from an unfamiliar security/governance requirement to research, lab/POV, production design, implementation, documentation and knowledge transfer.\nShows evidence of expanding beyond one Microsoft Purview feature into broader data-security, cloud-security or AI-security responsibilities.\nWhat Success Looks Like\nTakes technical ownership of all Data security, AI Governance, Purview DLP, labels and data lifecycle/eDiscovery capabilities and reduces dependency on external expertise.\nImproves the organization's visibility and control of sensitive data across Microsoft 365 and endpoints.\nBuilds practical AI data-security capability around Copilot/GenAI readiness, Shadow AI and sensitive-data exposure rather than remaining a traditional DLP-only specialist.\nTurns new data-security and AI-governance requirements into implemented, documented and supportable controls.\nExperience & Qualifications\n9+ years relevant experience across enterprise IT, Microsoft 365, endpoint/security or related infrastructure disciplines.\nDemonstrated experience owning production systems and resolving complex technical problems, not only following predefined operational procedures.\nExperience working with distributed/global stakeholders and managing technical changes across business teams is preferred.\nBachelor's degree or equivalent practical experience in Information Technology, Computer Science or a related discipline.\nPreferred Certifications\nMicrosoft Certified: Information Security Administrator Associate (SC-401) - strongly preferred\nMicrosoft Purview / information protection / compliance certification experience (SC-400 legacy or equivalent) - advantage\nMicrosoft 365 Administrator / MS-102 - advantage","description_format":"text","description_chars":6913,"description_truncated":false,"requirements":{"experience_years_min":9,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Cybersecurity","Document Management","Digital Signature"],"lifecycle":[{"event":"open","at":"2026-10-28T12:55:28Z"}],"visa":[],"liveness":{"score":45,"band":"ok","label":"Likely open","p_open":1,"p_active":0.815,"p_room":0.55,"age_days":19,"expected_fill_days":19,"reasons":["conf:1","velocity","win:tail"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/onit-senior-data-security-engineer-purview-ai-governance","json_url":"https://alion.io/job/onit-senior-data-security-engineer-purview-ai-governance.json","meta":{"generated_at":"2026-11-05T22:24:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3124,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58716},"rest":"https://alion.io/mcp/rest/get_company?id=58716"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fonit-senior-data-security-engineer-purview-ai-governance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fonit-senior-data-security-engineer-purview-ai-governance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fonit-senior-data-security-engineer-purview-ai-governance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/onit-senior-data-security-engineer-purview-ai-governance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fonit-senior-data-security-engineer-purview-ai-governance"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3397064}},{"tool":"search_jobs","arguments":{"company":"onit.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3397064},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}