MS Purview AI & Data Protection Engineer

Location: Dallas, TX • Full-Time

About the Role

The AI and Data Protection Engineer is responsible for designing, implementing, and maintaining the organization's data loss prevention (DLP) and information protection program, with a strong focus on Microsoft Purview and the security of AI-assisted tools such as Microsoft Copilot and Claude. This role bridges data security engineering and regulatory compliance, ensuring that sensitive data is classified, monitored, and protected in accordance with ISO 27001, GDPR, and (where applicable) PIPL, while enabling safe and compliant adoption of generative AI across the business.

Responsibilities

• Design, deploy, and maintain DLP policies and controls across endpoints, email, cloud storage, and SaaS applications using enterprise DLP tooling.
• Administer and optimize Microsoft Purview, including sensitivity labels, data classification, insider risk management, information barriers, retention policies, and compliance manager assessments.
• Establish and maintain data protection guardrails for AI tools, including Microsoft Copilot and Claude, covering data leakage prevention, prompt/response monitoring, access controls, and acceptable use policies.
• Partner with IT, legal, and business stakeholders to define data handling and governance standards for AI-generated content and AI-assisted workflows.
• Conduct data discovery and classification exercises to identify and protect sensitive, confidential, and regulated data across on-premises and cloud environments.
• Monitor DLP and Purview alerts, investigate policy violations, and drive remediation of data protection incidents.
• Maintain and support the organization's ISO 27001 information security management system (ISMS), including control documentation, internal audits, and continuous improvement activities.
• Ensure ongoing compliance with GDPR requirements, including data mapping, data subject access requests (DSARs), and privacy-by-design principles.
• Support compliance efforts related to China's Personal Information Protection Law (PIPL) where the organization processes data tied to Chinese data subjects or operations.
• Develop and deliver training and awareness materials on data protection, DLP, and safe AI usage for employees and stakeholders.
• Stay current on emerging AI governance frameworks, data protection regulations, and DLP/Purview product capabilities, recommending enhancements to the data protection program.
• Prepare reports, dashboards, and documentation for audits, regulators, and executive leadership.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• Hands-on experience with one or more DLP products (e.g., Microsoft Purview DLP, Symantec/Broadcom DLP, Forcepoint, Netskope, or similar).
• Demonstrated expertise with Microsoft Purview, including sensitivity labels, data loss prevention, information protection, and compliance features.
• Working knowledge of ISO 27001 requirements and experience supporting ISMS documentation, audits, or certification efforts.
• Solid understanding of GDPR requirements and practical experience applying them in a corporate environment.
• Understanding of standard data protection considerations for generative AI tools, specifically Microsoft Copilot and Claude, including data residency, prompt/output handling, and enterprise admin controls.
• Strong analytical, documentation, and communication skills, with the ability to translate technical risk into business terms for non-technical stakeholders.

Preferred Qualifications

• Familiarity with China's Personal Information Protection Law (PIPL) and its implications for cross-border data transfer and processing.
• Relevant certifications such as CIPP/E, CIPT, CISSP, CISM, or ISO 27001 Lead Implementer/Auditor.
• Experience with other Microsoft 365 security and compliance tools (e.g., Defender for Cloud Apps, Insider Risk Management, eDiscovery).
• Prior experience developing AI governance or acceptable use policies for enterprise generative AI deployments.

Work Authorization

US Citizen, Green Card holders, or authorized to work in the U.S.

Success Criteria

Within the first year, the AI and Data Protection Engineer will have implemented mature DLP and Purview controls across key data channels, established clear governance for AI tool usage, and positioned the organization to demonstrate compliance readiness against ISO 27001, GDPR, and PIPL requirements.

Benefits

• Comprehensive medical benefits
• Competitive pay
• 401(k) retirement plan

Pay

140,000 – 145,000 USD per year