Lead Data Security Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Comprehend objectives, scope, existing challenges, governance expectations, and desired outcomes for the comprehensive data security and remediation initiative.

• Analyze pertinent SharePoint, OneDrive, Microsoft Purview, and Cyera contexts to pinpoint areas where sensitive data exposure, oversharing, policy deficiencies, workflow limitations, or remediation backlog items pose risks.

• Integrate discovery, classification, tagging, labeling, remediation, and governance efforts into a cohesive project strategy that facilitates practical execution and long-term operational maturity.

• Collaborate with client teams to determine priority findings, ownership pathways, decision-making points, remediation dependencies, and immediate actions that require more in-depth technical validation.

• Evaluate how sensitive data is currently discovered, classified, tagged, labeled, monitored, and remediated across SharePoint, OneDrive, Cyera, and Microsoft Purview.

• Assist in defining and refining classification, tagging, and labeling practices that align with remediation, DLP policy, access governance, and ongoing data protection goals.

• Provide architectural guidance on labeling strategies, DLP policy implications, access exposure management, exception handling, and control behavior across the client’s Microsoft 365 and DSPM environments.

• Maintain and support the client’s governance model, operational workflows, and risk mitigation priorities.

• Engage directly in Cyera and Microsoft Purview to enhance findings, validate root causes, confirm control behaviors, and assist with remediation efforts.

• Facilitate controlled validation activities within approved environments to ensure that remediation actions effectively reduce exposure without causing unacceptable business disruption.

• Collaborate with security operations, DLP, governance, compliance, and business stakeholders to ensure findings are systematically triaged, assigned, remediated, and tracked.

• Establish practical metrics for measuring remediation progress, including closure rates, exposure reduction, policy effectiveness, escalation clarity, and audit readiness.

• Take initiative to integrate DSPM, Microsoft Purview, classification, labeling, DLP, access governance, and incident response workflows.

• Document recommended ownership structures, cadence, escalation paths, and governance checkpoints to ensure remediation continues beyond the initial project phase.

• Apply solutions in business-case terms, linking technical remediation to risk reduction, operational maturity, and governance outcomes.

⛳️ Requirements

• Over 7 years of experience in security architecture, data security, or related cybersecurity consulting roles, with proven ownership of client-facing projects from scoping to delivery.

• Demonstrated hands-on capability — able to access Cyera and Microsoft Purview directly, investigate findings, and personally drive them to remediation, rather than merely directing others.

• Extensive knowledge of Microsoft 365 data-layer security: SharePoint Online, OneDrive for Business, Microsoft Purview (DLP, sensitivity labels, Insider Risk Management, Audit), and Entra ID access/consent principles.

• Practical expertise in Cyera, the client’s enterprise-standard DSPM platform, including investigation and remediation of findings, not just dashboard interpretation.

• Proven ability to remediate findings identified by Cyera or any DLP tools — such as revoking access, adjusting policies, and resolving flagged exposures — as the client's primary concern is remediation capacity, not merely detection or reporting.

• Experience designing and leading purple-team-style validation exercises (not full red-team penetration testing) — controlled, safety-focused simulations in test environments.

• Strong grasp of incident response fundamentals: MTTD/MTTC measurement, scope determination, evidence/audit readiness, and remediation tracking, including handoffs of DLP findings to the SOC for incident response.

• Ability to work collaboratively as a peer alongside the client’s existing in-house DLP engineer — enhancing and facilitating their work rather than replacing or duplicating it.

• Familiarity with relevant regulatory and contractual notification obligations (e.g., state breach notification laws, SEC cyber disclosure rules) sufficient to inform discovery inquiries, without substituting the client's legal/compliance counsel.

• Excellent communication skills with stakeholders; adept at translating technical findings into business cases for both technical and executive audiences.

• Hands-on experience with both Cyera and Varonis is preferred, although Cyera is the enterprise-standard platform — broader DSPM platform knowledge is advantageous.

• Relevant certifications such as CISSP, SANS/GIAC (e.g., GDSA, GCTI), or Microsoft security certifications (SC-100, SC-401).

• Experience evaluating Copilot for M365 or other generative AI access-exposure risks prior to rollout.

• Prior experience in a public company or regulated industry environment (industrial, manufacturing, or similar).

• Comfort working within a formal enterprise data governance structure involving multiple business units — Data Governance Council, segment governance leads, RACI-based accountability model. We aim to foster an environment where all employees are empowered to thrive based on their skills, performance, and dedication.

🏝️ Benefits

• Health insurance

• 401(k) matching

• Flexible work hours

• Paid time off

• Remote work options