Senior Information Protection & AI Governance Engineer

Position Summary

We are seeking a Senior Information Protection & AI Governance Engineer to lead the strategy, engineering, and operational management of enterprise data protection, AI governance, and insider risk programs. This role will be instrumental in designing and optimizing Microsoft Purview capabilities, implementing governance controls for enterprise AI platforms, and enhancing insider risk detection to safeguard sensitive information while enabling responsible innovation.

The ideal candidate combines deep expertise in Microsoft security and compliance technologies with strong governance, risk, and security engineering experience. This individual will partner across security, compliance, legal, and business teams to balance data protection, regulatory requirements, user productivity, and secure AI adoption.

• Design, implement, and optimize Microsoft Purview Information Protection, Data Loss Prevention (DLP), Information Governance, Data Lifecycle Management, and Compliance solutions.
• Develop and maintain sensitivity labels, automated classification policies, data labeling strategies, and DLP controls.
• Enhance enterprise data governance frameworks and ensure alignment with organizational compliance requirements.
• Integrate Microsoft Purview with Microsoft 365, Azure, and other security and compliance platforms.
• Continuously assess and improve data protection capabilities to reduce risk and strengthen governance.

• Design and implement governance frameworks and security guardrails for Microsoft Copilot and other Generative AI platforms.
• Develop controls that mitigate risks associated with data exposure, oversharing, prompt injection, and unauthorized AI usage.
• Establish policies, monitoring capabilities, and governance processes that support responsible AI adoption.
• Partner with business and technology stakeholders to enable secure AI innovation while maintaining regulatory and compliance standards.
• Evaluate emerging AI governance technologies, trends, and best practices to strengthen enterprise AI security strategies.

• Configure, manage, and optimize Microsoft Purview Insider Risk Management capabilities.
• Develop and refine detection policies for insider threats, data exfiltration, policy violations, and anomalous user behavior.
• Analyze insider risk alerts, improve detection accuracy, and enhance overall program effectiveness through continuous tuning.
• Collaborate with Security Operations, Incident Response, Legal, Human Resources, and Compliance teams to investigate and address identified risks.
• Leverage analytics and operational insights to reduce false positives and improve threat detection fidelity.

• Develop automation and operational efficiencies using Power Shell, Microsoft Graph API, KQL, and related technologies.
• Build dashboards, metrics, and reporting solutions to measure compliance, information protection, and insider risk program effectiveness.
• Create and maintain technical standards, engineering documentation, operational procedures, and support runbooks.
• Contribute to continuous security improvement initiatives across the Microsoft security and compliance ecosystem.

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Information Security, or a related field, or equivalent experience.
• 7+ years of experience in enterprise cybersecurity, information protection, compliance, or security engineering.
• 5+ years of hands-on experience implementing and administering Microsoft Purview.
• Proven experience with:
  • Microsoft Purview Information Protection
  • Data Loss Prevention (DLP)
  • I…