Data and AI Security Consultant

Job description

Lead data security discovery workshops to understand sensitive data landscape, regulatory drivers, current Purview adoption, oversharing risks, and AI / Copilot readiness blockers. Assess Insider Risk Management, eDiscovery, Audit, Data Lifecycle Management, and Compliance Manager usage to improve investigation readiness and governance maturity. Apply DSPM and data-security-for-AI patterns to identify overshared sensitive data, label coverage gaps, exposed credentials, and risky data interactions before AI rollout.

Support Data Protection Agents and Purview agent scenarios such as sensitive data discovery, SIT recommendation, DLP triage, Purview posture assessment, and regulatory mapping. Create executive-ready deliverables including posture baselines, risk registers, remediation roadmaps, policy design packs, operating procedures, and adoption recommendations. Contribute reusable EAG Security IP, lab guides, demos, accelerators, playbooks, and enablement content for data security delivery at scale. 10+ years of experience in cybersecurity, information protection, data loss prevention, compliance engineering, data governance, or related security consulting roles.

Working knowledge of sensitive information types, classification strategies, sensitivity labels, DLP rules, alert triage, policy tuning, and exception handling. Ability to analyze policy exports, telemetry, PowerShell outputs, and Purview reports to identify coverage gaps and remediation priorities. Strong communication skills for technical workshops, executive readouts, project governance, and cross-functional collaboration with security, compliance, legal, and data teams.

Experience delivering Purview deployments for regulated customers across DLP, MIP, IRM, retention, eDiscovery, audit, or Copilot readiness scenarios. Ability to design custom sensitive information types, regex-based detection logic, policy coverage assessments, and evidence-backed compliance mappings. Experience creating reusable consulting IP such as discovery questionnaires, policy design templates, lab guides, dashboards, scripts, reports, and executive summaries.