M365 / Data Management & Compliance Specialist - Manager

We are seeking an M365 / Data Management & Compliance Specialist who will be responsible for developing, implementing, and maintaining global-wide data management and compliance programs within the Microsoft 365 environment. This role ensures that all digital data are properly governed, retained, and disposed of in accordance with regulatory, legal, and business requirements.

The ideal candidate will have hands-on expertise in M365 capabilities (e.g. Purview, SharePoint, OneDrive, Teams) with data retention policies, privacy obligations, and audit expectations.

Key Responsibilities

Data Management & Compliance

• Design, implement, and maintain data retention and disposal schedules within Microsoft Purview (formerly Compliance Center).

• Ensure compliance with data and information governance policies, legal holds, and industry regulations (e.g., GDPR, SOX, HIPAA, ISO 27001).

• Collaborate with Legal and Compliance to support eDiscovery, data classification, and defensible disposition processes.

• Conduct periodic audits of records and retention configurations to verify compliance and identify improvement opportunities.

• Maintain documentation of policies, controls, and processes related to M365 records lifecycle management.

Microsoft 365 Administration

• Configure and manage compliance features in Microsoft 365 (Retention Labels, Retention Policies, DLP, and Audit).

• Partner with GTech administrators to align SharePoint, OneDrive, and Teams architecture with retention and governance requirements.

• Support configuration of sensitivity labels, data loss prevention (DLP), and information protection settings.

• Test and validate new M365 compliance features, staying current on updates and industry best practices.

Governance & Collaboration

• Partner with data owners and stewards to identify and classify records according to the Data and Information Classification Policy.

• Provide guidance and training to end-users and data stewards on data management best practices in M365.

• Serve as a subject matter expert (SME) for M365 compliance and information governance initiatives.

• Support internal and external audits by preparing evidence, reports, and system documentation.

Required Qualifications

• Bachelor’s degree in Information Management, Library Science, Computer Science, Business Administration, or a related field.

• 5+ years of experience in Data Management, Data/Information Governance, or Compliance within a digital environment.

• 3+ years of hands-on experience with Microsoft 365 Compliance and Information Governance tools (Purview, Retention Policies, DLP, etc.).

• Strong understanding of regulatory and compliance frameworks (e.g., GDPR, SOX, ISO 27001, NARA, HIPAA).

• Excellent analytical, communication, and stakeholder management skills.

Preferred Qualifications

• Microsoft Certified: Information Protection Administrator Associate (SC-400) or equivalent certification.

• Experience in large, complex, or global environments.

• Familiarity with data classification frameworks, metadata management, and content lifecycle automation.

• Knowledge of data retention schedules and disposition workflows in regulated industries.

• Knowledge of Informatica, Alation, or Collibra

• Familiarity with Microsoft Security Baseline Model technology

Key Competencies

• Attention to detail and accuracy

• Strong problem-solving and analytical abilities

• Collaborative mindset across IT, Legal, and Compliance

• Ability to translate compliance requirements into technical controls

• Commitment to continuous improvement and data stewardship