Senior Purview Data Expert

The client is a leading international consulting company specializing in real estate, infrastructure, and industrial sector solutions. Headquartered in Stuttgart, Germany, they operate in over 60 locations worldwide with approximately 6,000 employees.

They are recognized for their strong focus on sustainability, digital transformation, and industrial modernization, delivering cost-efficient, future-ready solutions tailored to complex enterprise environments.

We are looking for a Microsoft Purview expert to lead a two month reference implementation for an international client. You will join their Cybersecurity GRC team and report to the Head of Global Cyber Security GRC.

The project is driven by security governance. Your job is to make sure the organisation meets data privacy regulations and its own information classification rules. You will find regulatory and data risks, then fix them using Purview's data protection, compliance and governance capabilities. The work runs from discovery workshops through a test deployment and into the live rollout.

You will work with an internal cross-functional team, collaborating with engineers and business stakeholders to deliver scalable, high-quality data solutions.

• Interview process that respects people and their time
• Professional and open IT community
• Internal meet-ups and resources for knowledge sharing
• Time for recovery and relaxation
• Bright online and offline events
• Opportunity to become part of our internal volunteer community

You will own the reference implementation end to end. That covers objectives and scope, current state and requirements, the classification and label structure, what each label protects, the label rollout, the role and authorisation concept, governance and operations, and dependencies. You will also report interim results and open issues as you go.

1. Discovery. Run workshops to understand how the client classifies, retains and protects data today. Look at how users access and share information. Define goals and monitoring with Purview.
2. Review. Check the current approach against data protection law and best practice standards. Flag any non compliance or data risk straight away.
3. Assess risk. Review the data privacy programme for live risks and spot user behaviour that could lead to a breach or non compliance.
4. Update. Recommend policy changes and build a test deployment of the labelling solution, so nothing touches live operations while you tune it.
5. Recommend. Review the test results and propose final changes for live. Explain the impact on everyday users and the wider business before anything goes live.
6. Implement. Deploy Purview into the live environment once stakeholders sign off. You will lead the rollout and support the client team as they take over day to day operations.

• Hands on delivery of Microsoft Purview projects, especially sensitivity labels, information protection, data loss prevention and retention
• Deep knowledge of ISO/IEC 27001, 27017 and 27701, NIST and GDPR
• A track record running compliance programmes and getting organisations audit ready
• Experience turning policy into working processes and technical controls
• Strong analytical thinking and attention to detail
• Confidence leading workshops with security, legal and business stakeholders
• Microsoft certification in Azure and Purview, for example SC-401 Information Security Administrator, SC-100 or AZ-500
• Fluent English

• Nice to have

• Experience with Purview Insider Risk Management or Communication Compliance to detect risky user behaviour
• Background in Microsoft cloud security and threat protection beyond Purview, such as Defender
• Earlier work in a global company with data across several regions and privacy regimes
• Consulting experience on short, fixed scope engagements