Data Security Team Lead

About the Role

We are looking for a proficient Data Security Team Lead to spearhead the deployment of data security, classification, retention, and governance policies utilizing Microsoft Purview, serving clients across the Middle East and Africa region. This position entails leading at least one team member with potential for expanded leadership duties. Expertise in Microsoft Purview is essential, alongside valuable experience with third-party data security solutions. Familiarity with Mobile Device Management and Mobile Application Management, especially Microsoft Intune, and conditional access policies, is advantageous. This role offers a dynamic work atmosphere with growth and leadership prospects in the data security field.

Key Responsibilities

• Design, implement, and enhance data protection solutions using Microsoft Purview and other prominent DLP and data governance tools.
• Develop and enforce policies addressing Data Loss Prevention, Insider Risk Management, Data Security Posture Management for AI, and Cloud Access Security Broker to prevent unauthorized access and ensure compliance.
• Implement robust data classification and labeling strategies for enhanced protection.
• Establish and manage data retention policies aligned with regulatory and business demands.
• Deploy Azure Information Protection on-premises scanner to secure local data.
• Integrate Cloud Access Security Broker solutions with on-premises firewalls to strengthen security and increase visibility.
• Lead configuration and deployment of Microsoft Priva and Microsoft Purview Data Map.
• Ensure adherence to regulations including GDPR, NCA, and ISO 27001.
• Support Data Security Posture Management initiatives by risk assessment, data flow monitoring, and security policy optimization.
• Create templates and automate implementations for consistent and efficient data security and governance deployments.
• Automate policy rollout and security configurations via PowerShell, APIs, and Microsoft Security & Compliance tools.
• Deploy and manage Mobile Device Management, Mobile Application Management, and Conditional Access policies to address security vulnerabilities.
• Oversee security projects from scoping to post-deployment support, ensuring adherence to timelines and budgets.
• Produce High-Level and Low-Level Designs, evaluate customer environments, and prepare Requests for Information and Lists as required.
• Monitor and respond promptly to data security incidents, conducting thorough investigations and remediation.
• Analyze security risks and instate best practices to mitigate them effectively.
• Continuously optimize security policies and controls driven by evolving business requirements.
• Manage a team of at least two members with prospects for further leadership expansion.
• Collaborate with cross-functional teams and clients to align security policies with business strategies and ensure seamless implementation.
• Engage stakeholders to constantly improve security posture and governance policies responsive to business changes.
• Conduct training workshops for users and administrators on data security, classification, governance policies, and compliance tools.
• Participate in defining project scopes and develop clear deliverables and implementation roadmaps.
• Maintain comprehensive technical documentation, user manuals, and administrative guides to facilitate technology adoption.
• Ensure availability and upkeep of technical test environments for internal assessments and new technology trials.

Qualifications & Experience

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.
• A minimum of 4 years directly working in data security, compliance, and governance solution implementation, centered on Microsoft Purview.
• At least 2 years in a leadership capacity overseeing data protection and compliance program deployments.
• Hands-on proficiency with Microsoft Purview Information Protection including DLP, data classification, retention strategies, and compliance adherence.
• Deep understanding of data governance, risk management, and regulatory compliance frameworks like GDPR, NCA, and ISO 27001.
• Extensive use of Microsoft Purview Compliance Portal tools such as Insider Risk Management, eDiscovery, and Audit capabilities.
• Practical experience setting up DLP policies in Microsoft 365 platforms including Teams, SharePoint, OneDrive, and Exchange Online.
• Strong knowledge of Microsoft Information Protection for labeling, encryption, and rights management.
• Familiarity with Microsoft Defender for Cloud Apps for overseeing data security and threat detection.
• Understanding of Microsoft Intune in MDM and MAM contexts and integration with Conditional Access for reinforced access controls.
• Effective communicator adept at explaining data protection strategies and compliance requirements to diversified audiences.

Certifications

• Required: GIAC Certified Data Protection or an equivalent recognized certification.
• Vendor certificates related to DLP, Data Classification, Litigation Holds, or governance tools are necessary.
• Preferred: Microsoft Certified: Information Protection Administrator Associate (SC-400) and Cybersecurity Architect Expert (SC-100).

Skills & Attributes

• Strong leadership and team management aptitude.
• Excellent capabilities in managing projects.
• Knowledgeable in security architecture and solution design.
• Experienced with data security technologies such as Data Loss Prevention, Data Classification, and Cloud Access Security Broker.
• Detail-oriented with strong analytical and problem-solving skills under pressure.
• Proficient in communicating and engaging with customers effectively.
• Thorough understanding of quality assurance standards and procedures.
• Experienced in configuring and troubleshooting data security solutions.
• Committed to staying current with new developments in data security methods, risks, and technologies.