Data Security and Compliance Engineer
- Ottawa, ON, Canada
- Greater Ottawa Metropolitan Area, Canada
Contract
Applications open in a new tab.
Job details
- Job type
- Contract
- Apply by
- Posting language
- English
- Posted
Original job description
LeverageTek is actively seeking a Data Security and Compliance Engineer for a 1-year contract engagement with its Ottawa/Toronto-based customer.
Work Location
Successful candidates will be expected to work EST time zone hours.
Key Tasks
- Configure and maintain Microsoft Purview settings, integrations, data connectors, role groups and solution permissions
- Apply least privilege access, need-to-know handling and segregation of duties to administrative and investigation roles
- Assess sensitive information and work with data owners, privacy, legal and information management stakeholders to define protection requirements
- Configure and test sensitivity labels, label policies, encryption, auto-labelling, sensitive information types, Exact Data Match and trainable classifiers
- Design, configure and tune Data Loss Prevention policies across Exchange, SharePoint, OneDrive, Teams, Office applications, endpoints and approved AI data flows
- Configure and operate Data Security Posture Management to identify sensitive-data exposure, oversharing, risky activity and AI-related data risks
- Configure and tune Insider Risk Management policies, indicators, triggering events, risk scoring and alert thresholds
- Monitor and triage DLP, Insider Risk, DSPM and related compliance alerts
- Use audit records and approved investigation tools to validate events and coordinate containment, escalation and remediation
- Develop test plans, test cases and synthetic datasets; validate intended protection outcomes and business-process impacts
- Maintain technical designs, policy specifications, configuration records, test evidence, runbooks and support procedures
- Transfer knowledge to client staff through structured documentation, demonstrations, operating procedures and hands-on coaching
Key Qualifications
- 5-8+ years of progressive experience in data security, information protection, compliance administration or Microsoft 365 security, with demonstrated responsibility for production controls
- Hands-on experience configuring and operating Microsoft Purview across Data Loss Prevention, Information Protection, Insider Risk Management and Data Security Posture Management
- Strong knowledge of Microsoft 365 workloads including Exchange Online, SharePoint Online, OneDrive, Teams and supported endpoints
Qualifications
- Experience with sensitive information types, regular expressions, Exact Data Match, trainable classifiers, sensitivity labels, encryption, auto-labelling and policy simulation
- Experience assessing oversharing, sensitive-data exposure, Copilot and agent data flows, AI interactions and permission-related risks
- Knowledge of Microsoft Entra ID, role-based access control, Purview role groups, least-privilege administration and segregation of duties
- Experience using Microsoft 365 audit logs, Activity Explorer, Content Explorer and investigation or alert-management workflows
- Microsoft Certified Information Protection and Compliance Administrator Associate (SC-401) or equivalent demonstrated experience
- Experience with Endpoint DLP, Microsoft Defender, Intune, Defender for Cloud Apps or Security Copilot
- Experience with Adaptive Protection, Communication Compliance, eDiscovery, Audit, Compliance Manager or Records Management
- Experience with Microsoft Purview PowerShell, Microsoft Graph APIs, Power Automate or other security and compliance automation
- Experience supporting AI data security assessments, Microsoft 365 Copilot, Copilot Studio agents or other generative AI services
- GitHub Foundations, GitHub Advanced Security, GH-200 or GH-300 certification or equivalent experience
- French-language proficiency is an asset
- Degree or diploma in cybersecurity, computer science, information technology, information management or a related discipline
Compensation
Hourly Rate Negotiable. This is an existing position vacancy.
About LeverageTek Staffing Solutions
Founded in 2003, LeverageTek provides end-to-end, cross-functional staffing solutions throughout North America. We are a trusted partner to leading private and public sector organizations and experts in talent solutions that create optimal business outcomes.
Don't let our name fool you. Our roots are in technology, but we are also a proven leader in accounting and finance, sales and marketing, human resources, supply chain, and legal talent acquisition. We offer contract and permanent staffing, executive search, talent mapping, management consultancy, and contractor payroll management.
LeverageTek is an equal opportunity employer. We offer a welcoming and inclusive environment in service to one another, our customers, the candidates we represent, and the diverse communities we call home. We do all of this with kindness, empathy, and respect for each other. LeverageTek is committed to employment equity and creating a diverse and inclusive workplace. We welcome applications from all qualified individuals regardless of race, religion, gender, national origin, age, disability, and marital status.
Accessibility accommodations are available upon request.
LeverageTek's specialized recruiting professionals use their expertise and our proprietary AI to accelerate connections between top talent and leading companies, while ensuring all screening and hiring decisions remain with our expert human team.
More about this job
Responsibilities
Configure, operate, and tune Microsoft Purview data protection and compliance controls, including DLP, sensitivity labeling, Insider Risk Management, and Data Security Posture Management. Investigate and triage alerts, validate protection outcomes through testing, maintain technical documentation, and transfer operational knowledge to client staff.
Requirements
Candidates should have 5–8+ years of progressive experience in data security, information protection, compliance administration, or Microsoft 365 security, with hands-on production experience using Microsoft Purview. Strong knowledge of Microsoft 365 workloads and related security controls is required; SC-401 or equivalent experience is cited, while additional platform experience, certifications, and French proficiency are assets.
Skills
- Microsoft Purview
- Data Loss Prevention
- Information Protection
- Insider Risk Management
- Data Security Posture Management
- Microsoft 365
- Sensitivity Labels
- Exact Data Match
- Trainable Classifiers
- Microsoft Entra ID
- Role-Based Access Control
- Microsoft 365 Audit Logs
- Microsoft Graph APIs
- PowerShell
- Generative AI Data Security
- Security Compliance
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Software
- Data & Analytics
Keywords
- Microsoft Purview
- Microsoft 365
- Data Loss Prevention
- Information Protection
- Insider Risk Management
- Data Security Posture Management
- Exchange Online
- SharePoint Online
- OneDrive
- Microsoft Teams
- Endpoint DLP
- Sensitivity Labels
- Encryption
- Auto-Labelling
- Sensitive Information Types
- Regular Expressions
- Exact Data Match
- Trainable Classifiers
- Microsoft Entra ID
- Role-Based Access Control
- Least Privilege
- Microsoft Defender
- Microsoft Intune
- Microsoft Graph APIs
- PowerShell
- Microsoft 365 Copilot
- Copilot Studio
- SC-401
- Audit Logs
- Compliance Manager