We are looking for an experienced Microsoft Security Expert to lead the design, implementation, and management of enterprise data protection strategies using Microsoft Purview Data Loss Prevention (DLP), Microsoft Defender for Cloud Apps (CASB), and related security platforms. This role is critical in enforcing Zero Trust principles, safeguarding sensitive data, and ensuring compliance across cloud and on-premises environments.

Key Responsibilities

• Data Loss Prevention (DLP) Strategy
• Design and implement DLP policies using Microsoft Purview to protect sensitive data across Microsoft 365 services (Exchange, SharePoint, OneDrive, Teams), endpoints, and non-Microsoft cloud apps.
• Configure sensitivity labels, adaptive protection, and policy enforcement for data at rest, in use, and in motion.
• CASB Integration
• Deploy and manage Microsoft Defender for Cloud Apps (MDCA) to monitor and control SaaS usage, enforce session policies, and detect risky behaviors.
• Integrate CASB with Purview and Defender for Endpoint for unified visibility and incident response.
• Governance & Compliance
• Align DLP and CASB configurations with organizational compliance frameworks and regulatory requirements.
• Collaborate with Information Governance and Risk teams to ensure consistent application of data classification and retention policies.

.

• Incident Response & Reporting
• Investigate DLP s and CASB incidents, gather evidence, and coordinate remediation with stakeholders.
• Generate compliance and security reports for leadership and auditors.
• Continuous Improvement
• Stay current with Microsoft security roadmap and emerging threats.
• Optimize policies based on analytics, user behavior, and evolving business needs.

Required Qualifications

• Experience
• 5+ years in information security with a focus on data protection and cloud security.
• Hands-on experience with Microsoft Purview DLP, Microsoft Defender for Cloud Apps (CASB), and Microsoft 365 security ecosystem.
• Technical Skills
• Strong understanding of data classification, sensitivity labels, and adaptive protection.
• Familiarity with SIEM integration, incident response workflows, and regulatory compliance (e.g., GDPR, HIPAA).
• Certifications (Preferred)
• Microsoft Certified: Information Protection Administrator Associate
• Microsoft Certified: Security Operations Analyst Associate
• CISSP or equivalent.

Preferred Attributes

• Excellent analytical and troubleshooting skills.
• Strong communication and documentation abilities.
• Ability to work cross-functionally with IT, compliance, and business teams.

‘Grant Thornton INDUS’ comprises GT U.S. Shared Services Center India Pvt Ltd and Grant Thornton U.S. Knowledge and Capability Center India Pvt Ltd. Grant Thornton INDUS is the shared services center supporting the operations of Grant Thornton LLP, the U.S. member firm of Grant Thornton International Ltd. Established in 2012, Grant Thornton INDUS employs professionals across a wide range of disciplines including Tax, Audit, Advisory, and other operational functions. What sets us apart isn’t just what we do – it’s how we do it. We support and enable the firm’s purpose of making business more personal and building trust into every result. We’re collaborators – obsessed with quality and ready for anything – who understand the value of strong relationships. Our professionals are well integrated to seamlessly support the U.S. engagement teams, help increase Grant Thornton’s access to a wide talent pool, and improve operational efficiencies. Empowered people, bold leadership, and distinctive client service are imbibed in the culture at Grant Thornton INDUS. We are a transparent, competitive, and excellence-driven firm that offers an opportunity to be part of something significant. In addition, professionals at Grant Thornton INDUS serve communities in India through inspirational and generous services to give back to the communities they work in. Grant Thornton INDUS has its offices in two locations in India – Bengaluru and Kolkata