VySystems · 1 day ago
Office365 Governance, Purview & Compliance Architec
VySystems is seeking an Office365 Governance, Purview & Compliance Architect to design and implement governance standards for Microsoft 365 applications. The role involves establishing policies for data management and compliance, deploying Microsoft Purview, and ensuring alignment with regulatory requirements.
Responsibilities
Design and implement Microsoft 365 governance standards for Teams, SharePoint, OneDrive, and Exchange
Establish policies related to access management, external sharing, lifecycle management, retention, and secure collaboration
Deploy and configure Microsoft Purview for data classification, sensitivity labels, labeling policies, auto-labeling, and lifecycle management
Configure data discovery, Content Explorer, and auditing capabilities within Purview to track and report PHI activity
Build and implement Data Loss Prevention (DLP) policies across email, Teams, OneDrive, SharePoint, and endpoint devices
Define and enforce rules that prevent unauthorized access, sharing, or movement of PHI and regulated data
Deploy Microsoft Information Protection (MIP/AIP) features including encryption, sensitivity labels, and secure external collaboration settings
Configure classification and labeling automation for PHI and other regulated information
Align all O365 configurations with HIPAA Security Rule requirements, NIST control families, CIS benchmarks, and SOC 2 control expectations
Configure and support Microsoft 365 compliance tools including Compliance Manager, Advanced Audit, Insider Risk Management, and Communication Compliance
Build evidence documentation, policy mappings, and compliance reports to support internal and external audits
Integrate Purview, DLP, and audit logs with Microsoft Sentinel or Splunk for centralized monitoring and alerting
Create dashboards and reports tracking PHI access, data movement, DLP violations, and labeling coverage
Document all configurations, develop runbooks and procedures, and ensure knowledge transfer to Security, Compliance, and IT Operations teams
Provide recommendations to improve compliance posture and optimize the usage of Microsoft 365 E5 capabilities
Qualification
Required
Strong hands-on experience configuring Microsoft Purview, DLP policies, retention settings, and Microsoft Information Protection (MIP/AIP)
Expertise with PowerShell, Microsoft Graph API, and automation for policy deployment and compliance reporting
Experience integrating Microsoft 365 security and compliance signals with SIEM platforms including Sentinel or Splunk
Strong background in Microsoft 365 security, identity, and collaboration workloads
Understanding of HIPAA requirements, PHI data controls, SOC 2 principles, NIST 800-53, and CIS benchmarks is a Value add
Company
VySystems
Vy Systems is a part of vy.ventures and is in the business of Technology consulting, Solutions, and Managed Services, providing invaluable services across many countries since 2002.
Funding
Current Stage
Late StageLeadership Team
Ramesh Santhanam
Founder and CSO
Company data provided by crunchbase