Lead Data Security Architect

Role Description

Client is seeking a Lead Data Security Architect to support a broader data security and remediation effort focused on reducing exposure across SharePoint, OneDrive, Microsoft Purview, and Cyera. This role provides technical leadership across the overall project, helping the client move from discovery and finding review into practical remediation, governance alignment, and sustainable operating processes.

The Architect should be hands-on and remediation-oriented, able to work directly in Cyera and across Microsoft environments to:

• Investigate findings
• Validate root cause
• Recommend corrective actions
• Help drive closure

The emphasis is on supporting the client through the work required to classify, tag, label, prioritize, and remediate data security findings in a structured way.

This role works alongside the client’s existing security, data governance, DLP, and operations teams, as well as WWT delivery resources. The Architect is not intended to replace internal ownership or duplicate day-to-day operational roles. Instead, the role helps unblock remediation decisions, align technical actions to governance requirements, and provide hands-on support for complex findings that require architecture-level judgment.

Program Context: This work supports the client’s broader enterprise information management and data security objectives. Cyera and Microsoft Purview are expected to serve as key platforms for identifying sensitive data, assessing exposure, applying classification and labeling controls, and driving remediation. The Architect should align recommendations and execution of support to the client’s governance model, operational workflows, and longer-term roadmap for protecting and managing data across the enterprise.

Qualifications

• 7+ years in security architecture, data security, or related cybersecurity consulting roles, with demonstrated ownership of client-facing engagements from scoping through delivery.
• Genuinely hands-on-keyboard — able to log into Cyera and Microsoft Purview directly, investigate a finding, and drive it to remediation personally.
• Deep working knowledge of Microsoft 365 data-layer security: SharePoint Online, OneDrive for Business, Microsoft Purview (DLP, sensitivity labels, Insider Risk Management, Audit), and Entra ID access/consent fundamentals.
• Direct, practical expertise in Cyera specifically — Client's enterprise-standard DSPM platform.
• Demonstrated ability to remediate findings surfaced by Cyera or any DLP tooling.
• Demonstrated ability to design and lead purple-team-style validation exercises.
• Strong command of incident response fundamentals: MTTD/MTTC measurement, scope determination, evidence/audit readiness, and remediation tracking.
• Comfort working as a peer alongside a client's existing in-house DLP engineer.
• Working knowledge of relevant regulatory and contractual notification obligations.
• Excellent stakeholder-facing communication skills; able to translate technical findings into a business case for both technical and executive audiences.

Requirements

• Hands-on experience with both Cyera and Varonis is viewed favorably by the client.
• Relevant certifications such as CISSP, SANS/GIAC (e.g., GDSA, GCTI), or Microsoft security certifications (SC-100, SC-401).
• Experience assessing Copilot for M365 or other generative-AI access-exposure risk ahead of rollout.
• Prior experience in a public-company or regulated-industry environment (industrial, manufacturing, or similar).
• Comfort operating within a formal enterprise data governance structure spanning multiple business units.

Benefits

We strive to create an environment where all employees are empowered to succeed based on their skills, performance, and dedication.

Company Description

If you’re excited about this role and ready to grow with a team that values ambition, ideas, and impact — we’d love to hear from you.

Apply now and start building your journey with Vailexa.