M365 Purview / MIP / Compliance Architect
Apex Systems · Charlotte, NC · 6 days ago
Art & CreativeContract
Location: Charlotte, North Carolina, Plano TX, Jacksonville FL (Hybrid onsite)
About the role
We are seeking an experienced Microsoft 365 Purview & Compliance Architect to lead the design, implementation, and governance of enterprise data protection, information security, compliance, and records management solutions across the Microsoft 365 ecosystem. This individual will serve as the technical authority for Microsoft Purview, Microsoft Information Protection (MIP), Data Loss Prevention (DLP), eDiscovery, Records Management, and Data Lifecycle Management initiatives while partnering with Security, Risk, Legal, Compliance, and Infrastructure teams.
Responsibilities
- Architect and implement Microsoft Purview solutions across Exchange Online, SharePoint Online, OneDrive, Teams, and Copilot.
- Design enterprise data classification and sensitivity labeling strategies using Microsoft Information Protection (MIP).
- Lead implementation of Data Loss Prevention (DLP) policies for structured and unstructured data.
- Design and govern Data Lifecycle Management, Retention Policies, Retention Labels, and Records Management programs.
- Implement and support eDiscovery (Standard & Premium), Legal Hold, Insider Risk Management, and Compliance investigations.
- Conduct compliance assessments against regulatory frameworks such as SOX, HIPAA, GDPR, PCI-DSS, GLBA, and internal governance standards.
- Develop data governance policies and controls for sensitive data protection.
- Partner with Cybersecurity, Legal, Risk, Audit, and Privacy teams to address regulatory requirements.
- Provide architecture guidance for Microsoft 365 E5 Security & Compliance capabilities.
- Evaluate Copilot readiness and implement controls around sensitive data exposure.
- Develop technical standards, operational procedures, and governance documentation.
- Lead migrations, roadmap planning, and enterprise-wide Purview adoption initiatives.
Requirements
- Microsoft Purview: 5+ years designing and implementing Microsoft Purview solutions.
- Experience with Data Classification, Sensitivity Labels, Auto-labeling, Data Loss Prevention (DLP), eDiscovery (Standard & Premium), Records Management, Data Lifecycle Management, Information Governance, Compliance Manager, and Audit and Investigation tools.
- Microsoft Information Protection (MIP): Experience building enterprise-wide MIP strategies, including sensitivity label creation, auto-labeling policies, encryption, and rights management for emails, documents, Teams, and SharePoint content.
- Compliance & Governance: Experience supporting enterprise regulatory compliance programs (SOX, HIPAA, GDPR, PCI, GLBA, PII Data Protection). Experience partnering with Audit, Legal, Risk, or Compliance organizations.
- Microsoft 365 Expertise: Architecture experience with Exchange Online, SharePoint Online, OneDrive, Teams, Microsoft Defender, and Entra ID / Azure AD. Experience with Microsoft 365 E5 Security & Compliance licensing.
- Security Architecture: Experience with data security architecture, identity and access management concepts, Conditional Access, Privileged Identity Management (PIM), and Zero Trust principles.
Preferred Qualifications
- Copilot Data Protection Readiness assessments.
- Insider Risk Management.
- Communication Compliance.
- Data Security Posture Management (DSPM).
- Microsoft Defender Suite.
- PowerShell automation and Microsoft Graph API.
- Cloud security architecture within Azure.
- Mergers & acquisitions data governance initiatives.
- Microsoft certifications such as SC-400, SC-100, SC-200, AZ-305, or MS-102.
Benefits
- Supplemental benefits including medical, dental, vision, life, and disability insurance plans.
- Employee Stock Purchase Program (ESPP) and 401K with company match after 12 months of tenure.
- Health Savings Account (HSA) on the HDHP plan.
- SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions.
- Corporate discount savings program and other discounts.
- On-demand training program, access to certification prep, and a library of technical and leadership courses/books/seminars after 6+ months of tenure.
- Certification discounts and perks for associations including CompTIA and IIBA.
- Dedicated customer service team for consultants and a certified Career Coach.