Top Must-Have Skillsets
• Hands-on experience with Microsoft 365 security and compliance capabilities, particularly Microsoft Purview DLP.
• Experience creating, testing, tuning, and supporting the rollout of DLP policies across Exchange, SharePoint, OneDrive, and Teams.
• Experience managing the full DLP exception lifecycle, including risk assessment, approvals, business justification, compensating controls, documentation, expiration tracking, periodic recertification, and removal.
• Familiarity with sensitivity labeling, auto-labeling, and policy management within Microsoft 365.
• Strong analytical and problem-solving skills, including root-cause analysis, control-gap identification, exception-trend analysis, and control-effectiveness validation.
• Ability to balance implementation work, control testing, operational support, and multiple workstreams.
• Strong written and verbal communication skills, with the ability to work across security, compliance, IT, and business teams.
Nice-to-Have Skillsets
• Prior experience with SharePoint Online, Teams, Exchange, and OneDrive.
• Experience using ServiceNow to manage security-control exceptions, approvals, and supporting documentation.
• Experience developing control-health metrics, analyzing recurring exceptions, and reporting trends and remediation opportunities.
• Experience supporting DLP incidents, alerts, user tickets, runbooks, and knowledge transfer.
• Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field, or equivalent professional experience.
Role and Responsibilities:
Client is seeking an experienced Data Loss Prevention (DLP) Analyst to support and mature data protection controls, with primary responsibility for DLP exception governance and continuous process improvement. The candidate will manage the end-to-end exception lifecycle, strengthen approval and documentation standards, identify recurring control gaps, and translate operational findings into sustainable improvements across Microsoft Purview DLP, sensitivity labeling, and related data protection controls. This individual will partner closely with security, compliance, and business stakeholders to ensure controls and exceptions are appropriately evaluated, tested, approved, monitored, and periodically reviewed across the enterprise.
The candidate has hands-on experience with Microsoft 365, Purview DLP, auto-labeling, policy management, and structured exception handling. This role requires someone who can evaluate exception requests against defined criteria, coordinate risk-based approvals, document compensating controls, monitor exception conditions and expiration dates, and use recurring incidents, tickets, and business feedback to improve DLP controls and supporting processes. The individual must also be comfortable balancing implementation work, operational support, control testing, and data hygiene efforts across multiple data protection initiatives.
Key Responsibilities:
Manage the end-to-end lifecycle for DLP policy exceptions and approvals within ServiceNow, including intake, risk assessment, business justification, stakeholder approval, compensating controls, documentation, implementation, expiration tracking, periodic review, and timely removal when an exception is no longer required.
Maintain exception and control-health metrics, identify aging or recurring exceptions, analyze common request drivers, and report trends, risks, and remediation opportunities to control owners and governance stakeholders.
Support the design, configuration, testing, and rollout of Microsoft Purview DLP policies across Microsoft 365 workloads (Exchange, SharePoint, OneDrive, Teams).
Assist with sensitivity labeling and auto‐labeling initiatives, including policy tuning and validation.
Partner with internal teams to test new DLP and data protection controls, validate effectiveness, and support phased deployments.
Provide operational support for DLP-related incidents, alerts, and user support tickets involving labeling, messaging, or data protection controls; distinguish legitimate control defects from business exception needs; document outcomes; and route recurring issues into policy tuning, process remediation, or formal exception review.
Hands-on experience with DLP policy creation, tuning, exception handling, and rollout support, including risk-based exception assessment, approval workflows, compensating controls, expiration management, periodic recertification, and audit-ready documentation.
Strong analytical and problem-solving skills, with demonstrated ability to perform root-cause analysis, identify control and process gaps, evaluate exception trends, define meaningful metrics, and verify that corrective actions improve control effectiveness.
Collaborate with stakeholders on control improvements and continuous tuning to reduce false positives and business friction.
Assist with documentation, runbooks, and knowledge transfer related to DLP and M365 data protection capabilities.
Communicate clearly with technical and non‐technical stakeholders regarding DLP behavior, expectations, and best practices.
Qualifications
Experience
Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field (or equivalent experience).
Demonstrated experience working with Microsoft 365 security and compliance features, including Microsoft Purview DLP.
Familiarity with sensitivity labels and auto‐labeling concepts within M365.
Experience supporting or managing security controls in an enterprise environment, including testing and operational support.
Ability to manage multiple workstreams and shift between implementation and operational tasks as needed.
Effective communication skills and the ability to collaborate across security, IT, and business teams.
Prior experience with SharePoint Online, Teams, or other M365 workloads is a plus.
EEO:
“Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.”
