Data Security Specialist – Microsoft Purview

Introduction

12 Month Contract | JHB - Hybrid | A leading financial services client is seeking a Data Security Specialist – Microsoft Purview to lead the implementation and management of enterprise data protection and compliance controls across the Microsoft ecosystem. The successful candidate will be responsible for Microsoft Purview, Data Loss Prevention (DLP), information protection, insider risk management, and data governance to ensure sensitive healthcare and financial information is secured in accordance with POPIA, regulatory requirements, and organisational security standards.

Job Description

• Design, implement, and maintain Microsoft Purview Information Protection policies, including sensitivity labels, data classification, Data Loss Prevention (DLP), retention policies, and records management.

• Conduct enterprise data discovery and Data Security Posture Management (DSPM) assessments to identify sensitive information, assess risk, and reduce data exposure.

• Configure, optimise, and monitor DLP policies, information protection controls, and Insider Risk Management capabilities to prevent unauthorised access and data leakage.

• Investigate and respond to data security alerts, insider risk incidents, and policy violations while coordinating remediation activities with relevant stakeholders.

• Integrate Microsoft Purview with Microsoft Defender for Cloud Apps, Microsoft Sentinel, and Microsoft Defender XDR to strengthen enterprise threat detection and incident response.

• Collaborate with Privacy, Legal, Risk, Compliance, and Business Data Owners to translate POPIA, healthcare, financial services, and regulatory requirements into effective data protection controls.

• Develop and maintain data security reporting and key performance indicators (KPIs), including classified data coverage, DLP incidents, sensitivity label adoption, insider risk metrics, and high-risk data exposure.

• Partner with Identity & Access Management and Cloud Security teams to ensure AI technologies, Microsoft Copilot, cloud data movement, and identity-based access controls align with enterprise data classification and protection requirements.

• Develop user guidance, awareness material, and operational playbooks for secure data handling, DLP exceptions, and data security incident response.

• Contribute to AI security governance by defining how sensitive and regulated information may be securely accessed, processed, and protected within AI-enabled technologies.

• Support audit, compliance, and governance activities by maintaining documentation, security evidence, and ensuring enterprise data protection controls remain aligned with POPIA, regulatory requirements, and organisational security standards.

Minimum Requirements

Qualifications

• Bachelor's Degree or Diploma in Information Technology, Information Security, Cyber Security, Compliance, or a related field.

• Microsoft Certified: SC-400 – Information Protection and Compliance Administrator (Required).

• CIPP/E (Certified Information Privacy Professional/Europe) or equivalent privacy certification (Preferred).

• ISO 27001 Lead Implementer or ISO 27001 awareness certification advantageous.

• Continuous professional development in Microsoft Purview, Data Security Posture Management (DSPM), and data governance technologies.

Experience

• Minimum 4–8 years' experience in Data Security, Information Protection, Compliance, Privacy, or Information Security within Microsoft 365 and Azure environments.

• Minimum 3 years' hands-on experience implementing and administering Microsoft Purview in an enterprise environment.

• Proven experience designing and operating:

• Microsoft Purview Information Protection

• Sensitivity Labels

• Microsoft Purview Data Loss Prevention (DLP)

• Data Classification

• Retention Policies and Records Management

• Microsoft Purview Insider Risk Management

• Data Security Investigations (DSI) and Data Security Posture Management (DSPM)

• Experience integrating Microsoft Purview with Microsoft Defender for Cloud Apps (CASB), Microsoft Sentinel, and Microsoft Defender XDR.

• Experience working within highly regulated industries such as financial services, healthcare, insurance, or similar

Package & Remuneration

Salary Market Related