GRC e-Discovery and Risk Analyst

Job Description The company is seeking a GRC e-Discovery Specialist to support governance, risk, and compliance (GRC) operations by identifying, collecting, preserving, reviewing, and producing electronically stored information (ESI) for legal or regulatory matters using Microsoft Purview. The key responsibilities of this role will be the day-to-day execution of governance and compliance workflows related to eDiscovery, data retention, and privacy. The role will ensure the company’s audit readiness and eDiscovery risk tracking. In addition to these responsibilities, the role may be called upon to perform other GRC-related activities in the direction of the Manager, GRC. This position is well‑suited for an early-to-mid-career professional (3+ years of experience) looking to grow into broader governance and compliance responsibilities. Key Responsibilities Support and administer Microsoft Purview (Compliance Portal) from a GRC perspective, including eDiscovery, legal holds, retention policies, and content search. Manage litigation holds and the eDiscovery lifecycle for legal and regulatory matters. Partner with Legal, Risk, Privacy, enterprise Data Management and IT teams on discovery, audit, regulatory inquiries, compliance, and evidence collection. Maintain and audit data retention schedules across Microsoft365 and other collaboration platforms. Support data privacy operations, including DSARs under GDPR, CCPA, and related regulations. Support documentation, SOPs, and GRC governance workflows related to eDiscovery. Identify opportunities to improve or automate GRC processes related to eDiscovery. Skills and Competencies Technical Skills Hands‑on experience supporting or administering Microsoft Purview (Compliance Portal). Working knowledge of the eDiscovery lifecycle, including litigation holds and ESI handling. Working knowledge of GRC best practices and various regulatory and best practice frameworks, including GDPR, TRAIGA, NIST CSF, NIST Privacy Framework, and NIST Risk Management Framework (RMF). Experience with data retention, records management, and defensible deletion. Familiarity with Microsoft365 (SharePoint, Teams), Box, and other collaboration platforms. Experience supporting control and risk assessments of data controls, including risk evaluation of Third Parties as they relate to e-Discovery. Experience supporting audits, legal requests, risk assessments, or regulatory inquiries. Ability to document processes, procedures, and workflows clearly and accurately. Core Competencies Strong analytical and problem‑solving skills with attention to detail. Ability to explain technical processes to non‑technical stakeholders. Effective collaboration across Legal, Risk, Compliance, enterprise Data Management, IT, and business teams. High integrity and commitment to confidentiality. Adaptability in evolving regulatory and technological landscapes. Initiative and ownership in improving processes and policies. Required Qualifications 3+ years of experience in eDiscovery, information governance, compliance operations, privacy operations, or a related field. Hands‑on experience supporting or administering Microsoft Purview. Familiarity with regulatory and best practice frameworks, including GDPR, TRAIGA, and NIST frameworks. Familiarity with GRC best practices (Controls Management, Risk Management, Policy Management, Third‑Party Risk Management). Familiarity with the eDiscovery lifecycle and litigation holds. Experience with Microsoft365 (SharePoint, Teams), Box, and similar platforms. Strong documentation, organization, and cross‑functional communication skills. Ability to work independently while continuing to develop new skills. Preferred Qualifications Certified E-Discovery Specialist (CEDS) or similar certification. Exposure to governance, risk, or compliance programs and CRISC certification. Experience supporting audits or regulatory requirements. Reporting Line Reports to the Governance, Risk, and Compliance Manager and partners with Legal, Risk, Integration Managers, and Infrastructure teams. Equal Employment Opportunity Statement DPR is an equal‑opportunity employer and prohibits discrimination and harassment of any kind. All employment decisions at DPR are based on business needs, job requirements, and individual qualifications, without regard to race, color, religion or belief, national or ethnic origin, sex (including pregnancy), age, physical or mental disability, HIV status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, medical history or genetic information, or any other status protected by the laws or regulations in the locations where we operate. DPR will not tolerate discrimination or harassment based on any of these characteristics. Read more in our EEOE Policy. If you require a reasonable accommodation to complete this application or any step in the process: In the US, call Human Resources at View phone number on click.appcast.io. In Europe, email View email address on click.appcast.io. If you are seeking information on how DPR protects applicant data, please review our Privacy Policy. #J-18808-Ljbffr