Sr. Consultant, Microsoft Purview - Data Security & Governance

Job Description

Job Description

Senior Consultant, Microsoft Purview – Data Security & Governance

• Position/Team: Senior Consultant – Microsoft Purview | Consulting Services (MCA Practice)
• Reports To: Practice Director, MCA
• Location: Atlanta, GA / Remote-friendly for the right candidate
• Type: Full-Time | ~85–90% billable target
• Travel: Up to 25% based on client project needs

Your Opportunity

As a Microsoft Purview Senior Consultant at ivision, you will join our Consulting Services team within the Modern Work, Cloud & AI (MCA) Practice to help enterprise clients classify, protect, govern, and monitor the information their business depends on. Working alongside our Sales, Pre-Sales, and Delivery teams, you will lead hands-on delivery of data security assessments, Purview design and proof-of-value engagements, Copilot readiness work, and tenant-to-tenant Purview consolidations — translating data security governance requirements into enforceable policy and configuration.

You will work across multiple verticals and partner closely with ivision Architects, Principal Consultants, and Managed Services engineers to deliver high-quality, repeatable, defensible data protection outcomes.

What You Could Achieve

• Lead data security governance discovery — classification taxonomy, sensitive information types, data handling requirements, and control frameworks across the data lifecycle (creation, storage, use, transmission, archival, deletion).
• Design and deploy Microsoft Purview Information Protection — sensitivity label taxonomy, sub-labels, label publishing policies, encryption and rights management settings, content marking, and auto-labeling.
• Design and deploy Data Loss Prevention across Exchange Online, SharePoint Online, OneDrive for Business, and Teams — policy and rule authoring, sensitive info type and confidence tuning, policy tips, incident reporting, and staged promotion from simulation to audit to block-with-override.
• Implement Endpoint DLP where device onboarding to Microsoft Defender for Endpoint, OS, and telemetry prerequisites are in place.
• Configure Insider Risk Management — global settings, indicator and threshold tuning, role groups, triage workflow, and privacy considerations.
• Deliver Data Lifecycle and Records Management — retention labels and policies, disposition review, and records configuration planning.
• Execute DSPM and AI data readiness work — oversharing and permissions-hygiene analysis, sensitive data exposure review, SharePoint Restricted Content Discovery / Restricted Access Control, and guardrails that make Microsoft 365 Copilot rollout defensible.
• Run current-state Purview assessments — policy deployment health, false-positive analysis, classifier and confidence-level evaluation, adaptive scope drift, and administrative role review — producing prioritized, risk-ranked remediation plans.
• Deliver Purview tenant-to-tenant consolidations — inventory source configuration, perform gap analysis, map policies and labels to the target tenant, and validate functional parity post-migration.
• Produce client-ready deliverables : Summary of Findings, Purview Design Report, Implementation Roadmap, As-Built documentation, and executive readouts.
• Lead knowledge transfer and adoption enablement — administrator sessions, user orientation, how-to guides, and communication assets.
• Support pre-sales activities : scoping calls, LOE estimation, SOW contribution, and technical responses for assessment, POV, implementation, and Copilot-readiness opportunities.
• Mentor mid- and junior-level consultants and contribute to ivision's service catalog, scoping toolkits, and delivery standardization efforts.

What You've Accomplished

• 6+ years of hands-on experience delivering data security, compliance, or information governance solutions on Microsoft 365 , with deep focus on Microsoft Purview .
• Deep practical experience with:
• Microsoft Purview Information Protection — sensitivity labels, label policies, auto-labeling, encryption, and rights management.
• Data Loss Prevention — M365 workload policies, custom and template rule sets, sensitive information types, trainable classifiers, and policy tuning to reduce false positives.
• Endpoint DLP — Defender for Endpoint onboarding dependencies, device policy scoping, and staged enforcement.
• Insider Risk Management — policy scope, indicators, role groups, and case triage design.
• Data Lifecycle / Records Management — retention policies, retention labels, and disposition.
• Microsoft Purview eDiscovery (current portal experience) — cases, searches, holds, review sets, and export.
• Microsoft 365 platform fluency — Exchange Online, SharePoint Online, OneDrive for Business, Teams, and Entra ID, including permissions and external sharing models.
• Licensing fluency — E3 vs. E5 / E5 Compliance entitlements, Purview add-ons, SharePoint Advanced Management, and Entra ID Governance prerequisites.
• PowerShell and Microsoft Graph for Purview and Security & Compliance administration and reporting.
• Demonstrated ability to lead a workstream independently, manage client stakeholders across IT, security, legal, compliance, and business functions, and produce client-ready design documentation.
• Experience contributing to SOWs, scoping toolkits, and LOE estimation for data security and governance engagements.
• Strong consultative communication skills with technical and business audiences.
• Collaborative mindset; thrives in a geographically distributed delivery team and is comfortable mentoring junior engineers.

Education & Certifications

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent experience.

Required / Highly Desired Microsoft certifications:

• SC-401 or SC-400 — Information Security Administrator Associate (required)
• SC-100 — Microsoft Cybersecurity Architect Expert (strongly preferred)
• SC-200 — Security Operations Analyst Associate (preferred for Insider Risk / alert-triage-heavy engagements)
• MS-102 — Microsoft 365 Administrator Expert (preferred)
• AZ-500 — Azure Security Engineer Associate (preferred for engagements extending Purview beyond M365)

Familiarity with ITIL , agile delivery , and PMP practices is a plus. Working knowledge of regulatory frameworks (HIPAA, PCI-DSS, GDPR, CMMC) and maturity models such as the Microsoft 365 Maturity Model and the CISA Zero Trust data pillar is a plus.

Role Scope

Scope

Approx. % of Time

Consulting Services (billable delivery)

~85–90%

Pre-Sales support (scoping, LOE, SOW input)

~5–10%

Practice Development (mentorship, IP, enablement)

~5%

Other Requirements

• Physical: Prolonged periods at a desk and on a computer.
• Work Environment: Standard office and/or home-office environment.
• Travel: Up to 25%, based on client project needs.

About ivision

ivision is a Microsoft Solutions Partner with 22+ years of Microsoft partnership and 5x Solutions Partner + 6x Advanced Specializations . Headquartered in Atlanta, ivision delivers full-lifecycle consulting and managed services across Modern Work, Cloud & AI, Security, and Enterprise Infrastructure — and is a Microsoft Customer Zero for internal Copilot and AI adoption.

ivision is an equal opportunity employer.