Security Architecture Lead (Data Protection & Microsoft Purview)

About The Role

We are looking for a Security Architecture Lead focused on Data Protection and Microsoft Purview. This role owns the design and direction of enterprise data protection controls, not just implementation.

You will define how DLP, information protection, and data governance should work across cloud, hybrid, and internally built systems. This role requires strong judgment, the ability to challenge assumptions, and comfort making decisions when there is no perfect framework answer.

This is not a runbook-driven role. You are expected to think critically and design solutions that fit how the business and technology actually operate.

Key Responsibilities

Define and own the data protection and DLP architecture across Microsoft Purview

Design and refine risk-based DLP strategies, avoiding one-size-fits-all policies

Identify non-obvious data exposure risks across applications, integrations, and user behavior

Translate business and regulatory requirements into practical security architecture decisions

Challenge existing controls and redesign them when they no longer make sense

Partner with security, engineering, and business stakeholders to align protection with usability

Provide architectural guidance and design reviews for new platforms and systems

Required Experience & Skills

Strong experience with Microsoft Purview, including DLP and information protection

Background in security architecture, not just operational security

Solid understanding of data flows, cloud services, and hybrid environments

Experience making architecture decisions in ambiguous or evolving environments

Ability to clearly explain trade-offs and security rationale to non-security audiences

Ideal Candidate Profile

Thinks in scenarios and risk, not only tools and policies

Comfortable challenging long-standing assumptions

Can operate effectively without complete information

Pragmatic, curious, and business-aware