Microsoft 365 Data Security & Compliance Consultant

The Microsoft 365 Data Security & Compliance Consultant is responsible for the end-to-end implementation, configuration, and deployment of Microsoft Purview solutions across the Microsoft 365 ecosystem. You will take ownership of implementing enterprise data governance, information protection, compliance, and risk management solutions using Microsoft Purview-including Information Protection, Data Loss Prevention (DLP), Records Management, Insider Risk Management, Communication Compliance, eDiscovery, and Audit-to ensure enterprise data remains secure, compliant, and governed.

This is a hands-on consulting and engineering role focused on delivery: translating regulatory and business requirements into production-ready Microsoft Purview solutions, owning the deployment lifecycle, and ensuring data governance controls are aligned with enterprise security, privacy, and compliance standards.

Responsibilities:

Information Protection & Data Classification

• Design, configure, and deploy Microsoft Purview solutions based on client compliance, legal, privacy, and business requirements.
• Conduct discovery workshops with client compliance, legal, privacy, and IT stakeholders to develop target-state data governance and Microsoft Purview solution designs.
• Implement enterprise data classification frameworks using Sensitivity Labels, Microsoft Information Protection, auto-labeling, encryption, and container-level protection across Microsoft 365 services and endpoints.
• Develop and maintain enterprise information protection policies aligned with regulatory and organizational compliance requirements.

Data Loss Prevention & Records Management

• Configure Data Loss Prevention (DLP) policies across Microsoft 365 workloads, endpoints, and cloud environments using sensitivity labels and sensitive information types to prevent unauthorized sharing of regulated data.
• Deploy retention labels, retention policies, records management, disposition reviews, legal hold, and regulatory retention capabilities to meet organizational and regulatory compliance requirements.
• Configure data lifecycle management policies to ensure compliant retention, archival, and disposition of enterprise information.

Insider Risk, eDiscovery & Compliance

• Configure Insider Risk Management, Communication Compliance, eDiscovery (Standard and Premium), and Audit solutions to support investigations, legal discovery, and regulatory examinations.
• Implement audit and compliance controls that support organizational governance, regulatory reporting, and legal hold requirements.
• Partner with Collaboration & Content and Microsoft 365 Copilot consultants to ensure enterprise content is appropriately classified, protected, and governed for secure Microsoft 365 Copilot adoption.

Deployment Ownership & Governance

• Own the complete deployment lifecycle from discovery workshops and compliance assessments through solution design, implementation, staged rollouts, production deployment, testing, and operational handover.
• Develop reusable Microsoft Purview configuration baselines, policy templates, deployment guides, implementation documentation, and operational runbooks.
• Produce technical design documents, implementation documentation, operational guides, and knowledge transfer materials to support ongoing operations.

Client Advisory & Stakeholder Collaboration

• Act as a trusted advisor by translating regulatory, privacy, and data governance requirements into Microsoft Purview solutions while recommending Microsoft and industry best practices.
• Collaborate closely with Collaboration & Content, Endpoint & Identity, Copilot & AI, Cybersecurity, and client stakeholders to deliver integrated Microsoft 365 security and compliance solutions.
• Conduct client discovery workshops, compliance assessments, solution design sessions, and deployment planning activities while ensuring deployed solutions align with governance, regulatory, and organizational security standards.

Our Culture & Code of Conduct:

At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our Code of Conduct, which serves as a guiding framework for responsible behavior across everything we do - from how we work with each other to how we engage with clients and partners globally.

Requirements

• Design, configure, and deploy Microsoft Purview solutions based on client compliance, legal, privacy, and business requirements.
• Conduct discovery workshops with client compliance, legal, privacy, and IT stakeholders to develop target-state data governance and Microsoft Purview solution designs.
• Implement enterprise data classification frameworks using Sensitivity Labels, Microsoft Information Protection, auto-labeling, encryption, and container-level protection across Microsoft 365 services and endpoints.
• Develop and maintain enterprise information protection policies aligned with regulatory and organizational compliance requirements.
• Configure Data Loss Prevention (DLP) policies across Microsoft 365 workloads, endpoints, and cloud environments using sensitivity labels and sensitive information types to prevent unauthorized sharing of regulated data.
• Deploy retention labels, retention policies, records management, disposition reviews, legal hold, and regulatory retention capabilities to meet organizational and regulatory compliance requirements.
• Configure data lifecycle management policies to ensure compliant retention, archival, and disposition of enterprise information.
• Configure Insider Risk Management, Communication Compliance, eDiscovery (Standard and Premium), and Audit solutions to support investigations, legal discovery, and regulatory examinations.
• Implement audit and compliance controls that support organizational governance, regulatory reporting, and legal hold requirements.
• Partner with Collaboration & Content and Microsoft 365 Copilot consultants to ensure enterprise content is appropriately classified, protected, and governed for secure Microsoft 365 Copilot adoption.
• Own the complete deployment lifecycle from discovery workshops and compliance assessments through solution design, implementation, staged rollouts, production deployment, testing, and operational handover.
• Develop reusable Microsoft Purview configuration baselines, policy templates, deployment guides, implementation documentation, and operational runbooks.
• Produce technical design documents, implementation documentation, operational guides, and knowledge transfer materials to support ongoing operations.
• Act as a trusted advisor by translating regulatory, privacy, and data governance requirements into Microsoft Purview solutions while recommending Microsoft and industry best practices.
• Collaborate closely with Collaboration & Content, Endpoint & Identity, Copilot & AI, Cybersecurity, and client stakeholders to deliver integrated Microsoft 365 security and compliance solutions.
• Conduct client discovery workshops, compliance assessments, solution design sessions, and deployment planning activities while ensuring deployed solutions align with governance, regulatory, and organizational security standards.
• Excellent English communication skills.