Data Loss Prevention (DLP): Design, implement, and continuously improve DLP policies across Microsoft 365, endpoints, and cloud environments. Investigate policy violations, manage incidents, and develop custom sensitive information classifiers.
Information Governance: Maintain enterprise data classification standards and information protection policies, ensuring alignment with regulatory requirements such as GDPR, CCPA, and ISO 27001. Monitor data protection effectiveness and provide governance reporting.
Security Operations Integration: Integrate Purview with Microsoft Sentinel, develop monitoring and analytics capabilities, and support insider risk investigations and data-related security incidents.
Additional Security Operations: Provide secondary operational support across Microsoft Defender for Endpoint and Office 365, vulnerability management, and cloud security posture management (CSPM) across Azure and AWS, including alert investigation, policy tuning, vulnerability remediation, and security posture reporting.
Required Experience & Skills
6+ years in Information Security, with 3–5 years of focused experience in data protection, information protection, or data governance centred on Microsoft Purview and DLP.
Deep, hands-on expertise with Microsoft Purview — including Information Protection, DLP, Data Lifecycle Management, Audit, eDiscovery, and the Compliance portal.
Familiarity with endpoint and email security tooling (e.g., Microsoft Defender for Endpoint, Microsoft Defender for Office 365) is preferred; hands-on alert triage or policy administration experience is a plus.
Solid knowledge of relevant data protection regulations: GDPR, CCPA, ISO 27001 Annex A, NIST SP 800-53, CIS Controls.
Familiarity with vulnerability management and/or CSPM tooling (e.g, Defender VM, Defender for Cloud preferable or similar tooling experience); applied hands-on experience is strongly preferred.
Proficiency with PowerShell and Microsoft Graph API for Purview/M365 administration and automation.
Preferred Qualifications
Certifications: SC-400 (highly regarded), AZ-500 (highly regarded), SC-200, SC-300, CISM, CISSP, or equivalent beneficial.
Experience integrating Purview signals with Microsoft Sentinel, including KQL development and analytics rules.
SaaS provider or cloud-first enterprise experience.
Technical degree in Computer Science, Information Security, or related discipline.
Experience operating Microsoft Defender for Endpoint and/or Microsoft Defender for Office 365 in a SOC, IT security, or security engineering capacity.
What Success Looks Like (First 12 Months)
Purview sensitivity label coverage at or above agreed enterprise target, with auto-labelling operational for key sensitive data types.
DLP policy framework deployed across Exchange, SharePoint, OneDrive, Teams, and Endpoint — with documented tuning cycle and false-positive rate within tolerance.
Information Protection Policy reviewed, updated, and formally owned, with training delivered to key stakeholder groups.
Vulnerability management and posture management backfill effective across Cloud Security — scan cadence maintained, remediation tracked, and posture reporting delivered to leadership.
Endpoint and email security backfill effective — Defender for Endpoint and Defender for Office 365 alert triage SLAs met, with incident coordination handed off cleanly to Corporate IT Security.
Ensure accurate reporting data is presented including key security metrics that are included in dashboards for tabling at Security Governance committees and forums.
What we offer at Intapp
Our culture at Intapp emphasizes accountability, responsibility, and growth. We support each other in a positive, open atmosphere that fosters creativity, approachability, and teamwork. We’re committed to creating a modern work environment that’s connected yet flexible, supporting both professional success and work-life balance. In return for your passion, commitment, and collaborative approach, we offer:
Attractive compensation – including competitive base pay and performance based variable pay.
Equity/Stock in Intapp.
Opportunity to travel to other development centers for product training and cross-site collaboration.
One time home office stipend.
Generous paid parental leave (including adoptive leave), marriage leave, bereavement leave, carer's leave and paid sick days.
Meal allowance.
Reimbursement for training towards continuing education.
Intapp provides equal employment opportunities to all qualified applicants and will make hiring decisions without regard to race, color, sex, sexual orientation, gender identity or expression, religion, national origin or ancestry, age, disability, marital status, pregnancy, protected veteran status, protected genetic information, political affiliation, or any other characteristic protected by federal, state or local laws.
Please note: Intapp will not hire through text message, social media, or email alone. We will never extend a job offer unless you have been contacted directly by an Intapp recruiter and have participated in the interview process which will generally consist of 3 or more virtual or in person meetings. Please note that Intapp only uses company email addresses, which contain “@intapp.com” or “@dealcloud.com” to communicate with candidates via email. Intapp will never ask for financial information of any kind or for any payment during the job application process. We post all legitimate job openings on the Intapp Career Site at https://www.intapp.com/working-at-intapp/. If you believe you were a victim of such a scam, you may contact your local authorities. Intapp is not responsible for any claims, losses, damages, or expenses resulting from scammers.
