信息安全工程师 - 微软Purview专家
Information Security Engineer - Microsoft Purview Specialist
加入美国最全面的学术医疗中心之一，芝加哥大学医学中心，担任信息安全工程师 - 微软 Purview 专家，负责信息安全部门的工作。这是一份远程办公、可居家工作的职位，你可能位于芝加哥大都会区以外的地区。
微软 Purview 专家负责在芝加哥大学医学中心的 Microsoft 365 环境中设计、实施、管理、监控和持续改进微软 Purview 功能。
该职位是微软 Purview 中数据保护、信息治理、合规性、调查和数据生命周期功能的技术专家。该职位与信息安全部门、隐私部门、法务部门、档案管理部门、Microsoft 365 工程团队、终端管理团队和应用团队紧密合作，将组织、法规和业务需求转化为可扩展的技术控制措施。
成功候选人需具备在复杂企业环境中管理微软 Purview 的实际经验，并理解 Purview 功能如何与 Microsoft 365 服务（包括 Exchange Online、SharePoint Online、OneDrive、Microsoft Teams、Microsoft 365 应用程序、终端设备和 Microsoft Entra ID）进行交互。
核心工作职责
- 在 Microsoft 365 环境中管理并维护微软 Purview 功能。
- 设计、配置、测试、部署、监控和优化 Purview 策略和控制措施。
- 为 Purview 服务制定标准、操作流程、技术文档和治理文档。
- 信息保护与分类。
- 设计并维护组织的微软 Purview 信息保护策略。
- 开发和管理敏感标签、标签策略、发布策略、保护设置、加密控制以及相关的分类标准。
- 配置和维护敏感信息类型、精确数据匹配分类器、可训练分类器、关键词词典和其他适当的分类机制。
- 为 Exchange Online、SharePoint Online、OneDrive、Microsoft Teams、Microsoft 365 应用程序、终端设备和其他支持的工作负载开发 DLP 控制措施。
- 配置策略提示、通知、用户覆盖、事件报告、审计、限制和阻止操作。
- 管理 Exchange Online、SharePoint Online、OneDrive、Teams 中的保留策略。
查看英文原文
Join one of the nation’s most comprehensive academic medical centers, UChicago Medicine as an Information Security Engineer - Microsoft Purview Specialist for the Information Security department. This is a remote, work from home opportunity, and you may be based outside of the greater Chicagoland area.
The Microsoft Purview Specialist is responsible for the design, implementation, administration, monitoring, and continuous improvement of Microsoft Purview capabilities across the University of Chicago Medical Center Microsoft 365 environment.
This role serves as a technical subject matter expert for data protection, information governance, compliance, investigation, and data lifecycle capabilities within Microsoft Purview. The position works closely with Information Security, Privacy, Legal, Records Management, Microsoft 365 engineering, endpoint management, and application teams to translate organizational, regulatory, and business requirements into scalable technical controls.
The successful candidate will have hands-on experience administering Microsoft Purview in a complex enterprise environment and will understand how Purview capabilities interact with Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, Microsoft 365 Apps, endpoints, and Microsoft Entra ID.
Essential Job Functions
- Administer and maintain Microsoft Purview capabilities across the Microsoft 365 environment.
- Design, configure, test, deploy, monitor, and tune Purview policies and controls.
- Develop standards, operational procedures, technical documentation, and governance documentation for Purview services.
- Information Protection and Classification.
- Design and maintain the organization's Microsoft Purview Information Protection strategy.
- Develop and manage sensitivity labels, label policies, publishing policies, protection settings, encryption controls, and related classification standards.
- Configure and maintain Sensitive Information Types, Exact Data Match classifiers, trainable classifiers, keyword dictionaries, and other classification mechanisms where appropriate.
- Develop DLP controls for Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, Microsoft 365 applications, endpoints, and other supported workloads.
- Configure policy tips, notifications, user overrides, incident reporting, auditing, restriction, and blocking actions.
- Manage retention across Exchange Online, SharePoint Online, OneDrive, Teams, and other supported Microsoft 365 workloads.
- Support evaluation, implementation, and administration of Microsoft Purview Insider Risk Management and Communication Compliance
- Develop operational metrics and reporting for Purview controls.
- Participate in development of enterprise information-protection and data-governance standards.
- Develop and maintain PowerShell and Microsoft Graph automation used to administer, report on, validate, and monitor Microsoft Purview configurations.
- Automate repetitive administrative and reporting processes where supported.
- Develop scripts and tooling for configuration assessment, policy validation, reporting, and operational support.
- Maintain source-controlled scripts and supporting technical documentation.
Required Qualifications
- BS or BA degree in computer science, engineering, or equivalent education, training or work experience; master’s degree preferred
- Strong hands-on experience administering Microsoft Purview in a production Microsoft 365 environment
- Strong knowledge of Microsoft Purview Data Loss Prevention
- Strong knowledge of Microsoft Purview Information Protection, sensitivity labels, sensitive information types, and classification technologies
- Experience with Microsoft Purview Data Lifecycle Management and retention
- Experience supporting Microsoft Purview Audit and eDiscovery
- Strong understanding of Exchange Online, SharePoint Online, OneDrive, Microsoft Teams, and Microsoft 365 Apps
- Understanding of Microsoft Entra ID identity, groups, roles, and access-control concepts
- Experience administering Microsoft 365 using PowerShell
- Experience troubleshooting enterprise Microsoft 365 policy and configuration issues
- Experience creating technical documentation, operational procedures, and governance standards
- Ability to translate security, privacy, regulatory, legal, and business requirements into technical configurations
- Strong analytical and troubleshooting skills
Preferred Qualifications
- Experience supporting Microsoft 365 in a healthcare environment
- Experience implementing data-protection controls involving PHI and PII
- Knowledge of HIPAA and healthcare data-protection requirements
- Experience with Microsoft Purview Endpoint DLP
- Experience with Microsoft Purview Insider Risk Management
- Experience with Microsoft Purview Communication Compliance
- Experience with Microsoft Purview Records Management
- Experience with advanced Microsoft Purview eDiscovery workflows
- Experience with Exact Data Match, trainable classifiers, custom Sensitive Information Types, and advanced classification techniques
- Experience with Microsoft Graph and automation
- Experience with Microsoft Intune, Microsoft Defender, and Microsoft Entra ID
- Experience working within formal change-management and enterprise governance processes
- Experience operating Microsoft 365 in a large, regulated enterprise
Position Details
- Job Type/FTE: Full Time (1.0 FTE)
- Shift: Day
- Location: Remote
- Unit/Department: Information Security
- CBA Code: Non-Union
Originally posted on Himalayas