Required Experience Secret or reliability clearance Proven experience leading enterprise data classification and DLP strategy programs. Strong expertise with Microsoft Purview, including: Sensitivity Labels Data Loss Prevention (DLP) Auto-Classification Information Protection Data Classification Frameworks Experience implementing data protection programs across large, multi-business-unit organizations. Strong stakeholder management and requirements-gathering skills. Ability to move beyond strategy and help operationalize execution plans. Experience working within highly regulated or sensitive data environments. Strong understanding of information security, governance, compliance, and risk management principles.

Preferred Experience Experience with: Zscaler CrowdStrike Microsoft Security Ecosystem Security Architecture Compliance Programs Experience supporting defense, government, healthcare, aerospace, critical infrastructure, or similarly regulated industries.

Key Responsibilities Lead enterprise-wide data classification and data protection initiatives across business and technical teams. Conduct workshops and interviews with business units to identify sensitive data types, usage patterns, risk exposure, and protection requirements. Define and document data classification, labeling, DLP, and information protection strategies. Develop phased implementation roadmaps with clear priorities and deliverables across 90-day and 6-month horizons. Drive alignment among business stakeholders, cybersecurity teams, cloud architects, compliance teams, and IT operations. Translate regulatory requirements into actionable technical controls and governance processes. Leverage Microsoft Purview capabilities including sensitivity labels, DLP policies, auto-classification, and information protection controls. Partner with existing cybersecurity and cloud architects to integrate data protection with endpoint, identity, and network security controls. Work with operational teams to implement and operationalize approved solutions. Evaluate existing technologies including Microsoft, Zscaler, and CrowdStrike environments and recommend enhancements where appropriate. Assess and mitigate risks associated with AI tools, data exposure, and emerging information protection challenges.

The ideal candidate has: Led enterprise-wide data classification and DLP programs, not just data governance initiatives. Hands-on expertise with Microsoft Purview and understands how data protection intersects with endpoint and network security controls. Experience driving consensus and execution across multiple business units. A practical, phased implementation mindset focused on achievable outcomes. Strong knowledge of regulated data environments including Controlled Goods, ITAR, CUI, FCI, and similar compliance requirements. A track record of developing strategy and successfully translating that strategy into operational execution.