Principal Microsoft Purview Consultant

About Us 

Integrity360 is a leading independent cybersecurity and PCI specialist operating across Europe, Africa, the Caribbean, and North America. The company has office locations in Ireland, the UK, Bulgaria, Italy, Sweden, Spain, Lithuania, Ukraine, Africa, the Caribbean, and Canada, supported by eight Security Operations Centres (SOCs) located in Dublin, Sofia, Madrid, Stockholm, Paris, Rome, Johannesburg and Cape Town.

With over 900 employees, including more than 600 dedicated cybersecurity professionals, Integrity360 delivers a full suite of professional, support, and managed security services. These span the complete cyber risk lifecycle, from identification and prevention to detection, response, and recovery. Integrity360 supports over 3000 mid-market and enterprise organisations across sectors including financial services, insurance, government, healthcare, retail, telecommunications, and utilities.

At Integrity360, people come first. We invest heavily in learning, development and progression, fostering a dynamic culture where innovation, collaboration and continuous growth are at the heart of what we do. If you're ready to take your cyber security career to the next level, we’d love to hear from you. 

Job Role / Responsibilities 

As a Principal Microsoft Purview Consultant, you will lead the design and delivery of Microsoft Purview engagements focused on data classification, information protection, data loss prevention, insider risk management and AI data protection. You will work with clients to understand their sensitive data risks, translate business and compliance requirements into practical Microsoft security controls, and deliver controlled pilot deployments that provide a clear route to wider adoption. 

Your primary focus will be hands-on Purview delivery, including discovery, data classification strategy, label taxonomy design, classification design, sensitivity labels, auto-labelling, DLP policy design, endpoint DLP, service domain controls, policy tips, alerting, reporting and operational handover. You will help clients reduce the risk of sensitive information being exposed through unmanaged AI tools, browser-based services, Microsoft 365 Copilot usage and wider data egress scenarios. 

The role requires strong Microsoft Purview competence and the ability to deliver structured customer engagements from design through pilot implementation, testing, tuning, documentation and knowledge transfer. You do not need to be an expert across the full Microsoft security stack, but you should be willing to broaden your skills into adjacent areas such as Microsoft Defender XDR deployments, Microsoft Security assessments and wider cloud security services as our portfolio continues to develop. 

This is a client-facing Professional Services role, reporting to the Head of Cloud Security & Microsoft Security Services. You will manage assigned delivery activities from discovery and design through configuration, validation, recommendations and handover. You will be supported by an experienced team and have access to training, certification and mentoring across Microsoft Purview, Microsoft Security and related technologies. 

Key Responsibilities

• Lead Microsoft Purview design and implementation engagements for clients, with a focus on Information Protection, Data Loss Prevention, Insider Risk Management and AI data protection. 

• Run discovery workshops to understand sensitive data types, business processes, risk scenarios, regulatory drivers, pilot users, technical dependencies and client success criteria. 

• Design data classification strategies and label taxonomies that define classification levels, label hierarchy, naming conventions, usage guidance, protection actions and governance requirements. 

• Assess existing Purview configurations and document gaps, risks, improvement opportunities and practical recommendations. 

• Design and configure sensitivity labels, label policies, encryption, watermarking, access restrictions and supporting governance models. 

• Review, configure and tune Sensitive Information Types, trainable classifiers and custom classification logic to support accurate data discovery and policy enforcement. 

• Design and support auto-labelling pilots for emails, files and Microsoft 365 workloads where technically applicable and aligned to client licensing and requirements. 

• Design Microsoft Purview DLP policies across Exchange, SharePoint, OneDrive, Teams, endpoints and supported cloud or browser-based scenarios. 

• Implement AI data protection controls to detect, audit, restrict or block sensitive information being copied, pasted, uploaded, submitted or otherwise exposed to unmanaged AI services. 

• Configure endpoint DLP controls, including restricted apps, browser restrictions, sensitive service domains, clipboard, print, removable media and file upload scenarios where required. 

• Design and validate DLP workflows, including simulation mode, audit-only, block, block with override, user notifications, policy tips, administrative alerts and reporting. 

• Configure and demonstrate Insider Risk Management scenarios that align to customer policies, sensitive data activity, DLP signals, AI-related risk indicators and investigation workflows. 

• Use Purview tools such as Content Explorer, Activity Explorer, Data Explorer, alert dashboards and reporting to validate control effectiveness and support client knowledge transfer. 

• Produce clear client-facing deliverables, including design documents, configuration records, test evidence, risk summaries, recommendations, handover materials and implementation reports. 

• Support Microsoft Commerce Incentives delivery where applicable, including Data Protection modules and associated evidence or partner claim requirements. 

• Work collaboratively with clients, project managers, architects and operational teams to manage dependencies, risks, actions, scope boundaries and service transition. 

• Contribute to reusable delivery patterns, templates, playbooks and internal standards for Microsoft Purview and wider Microsoft Security services. 

• Maintain a willingness to learn beyond Purview, including Microsoft Defender XDR deployments, Microsoft Security assessments and broader cloud security consulting activities. 

• Undertake occasional travel where required to support client delivery. 

Essential 

• Strong hands-on experience with Microsoft Purview Information Protection, Data Loss Prevention and related Microsoft 365 compliance capabilities. 

• Experience designing and implementing sensitivity labels, label policies, encryption, watermarking, access controls and information protection governance. 

• Practical knowledge of data classification strategy, label taxonomy design, Sensitive Information Types, trainable classifiers, custom classification approaches and how classification supports sensitivity labelling, DLP and auto-labelling. 

• Experience designing, deploying and testing Microsoft Purview DLP policies across Microsoft 365 workloads and endpoints. 

• Understanding of endpoint DLP concepts, including restricted apps, browser restrictions, service domains, removable media, clipboard, print and file upload controls. 

• Knowledge of Insider Risk Management concepts, including risk indicators, policy design, alerts, investigation workflows and alignment with DLP activity. 

• Ability to translate client business requirements into practical, testable and proportionate Microsoft Purview control designs. 

• Experience delivering controlled pilots or phased deployments, including testing, tuning, user communications, knowledge transfer and post-pilot recommendations. 

• Ability to produce clear client-facing documentation, including design decisions, configuration records, test evidence, findings, recommendations and handover materials. 

• Confident written and verbal communication skills, with the ability to work directly with technical, operational and non-technical client stakeholders. 

• Strong troubleshooting and analytical skills, with the ability to investigate policy behaviour, false positives, control limitations and operational dependencies. 

• Ability to manage assigned delivery work independently while collaborating effectively with project, architecture, service and account teams. 

Desired 

• Experience implementing Microsoft Purview controls for AI security, shadow AI, browser-based AI services, Microsoft 365 Copilot and sensitive data exposure scenarios. 

• Familiarity with Microsoft 365 Copilot, Copilot-related data protection considerations and emerging Microsoft AI security capabilities, including Agent 365 where applicable. 

• Experience delivering, supporting or evidencing Microsoft Commerce Incentives activity, particularly Data Protection modules. 

• Experience working for an MSSP, security-focused professional services team, consultancy or Microsoft security partner. 

• Working knowledge of Microsoft Defender XDR workloads such as Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps and Defender for Cloud. 

• Willingness to learn and support wider Microsoft Security assessments, including secure score reviews, Defender XDR posture assessments, endpoint security reviews and cloud security reviews. 

• Understanding of Microsoft Entra ID, Conditional Access, endpoint management, Microsoft Intune and how identity and device posture influence data protection outcomes. 

• Familiarity with Microsoft Sentinel, security operations workflows, incident handling and how Purview signals may support broader detection and response activities. 

• Experience contributing to reusable templates, delivery accelerators, service collateral or internal standards for Microsoft security consulting. 

Desired Qualifications 

• Microsoft Certified: Information Protection and Compliance Administrator Associate. 

• Microsoft Certified: Security Operations Analyst Associate (SC-200). 

• Microsoft Certified: Cybersecurity Architect Expert (SC-100). 

• Relevant Microsoft Applied Skills covering Purview, data security, Microsoft Information Protection, DLP, Microsoft Security or Microsoft 365 administration. 

• Other relevant security, compliance or cloud certifications are beneficial but not essential. 

#LI-JL1