Note: The job is a remote job and is open to candidates in USA. Swoon is partnering with a major U.S. airline to hire a Data Loss Prevention Analyst supporting its enterprise Data Protection team. The role focuses on Microsoft Purview DLP policy operations, exception governance, risk assessment, and continuous improvement across Microsoft 365.

Responsibilities

• Configure, test, troubleshoot, and tune Microsoft Purview DLP policies across Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams
• Manage the full lifecycle of DLP exceptions, from initial intake and risk assessment through business justification, approvals, compensating controls, documentation, expiration tracking, recertification, and closure
• Investigate DLP alerts, false positives, and user-reported issues to determine whether the underlying problem requires a policy adjustment, technical remediation, or a formal business exception
• Support sensitivity labeling and auto-labeling initiatives, including policy testing, validation, and rollout activities
• Partner with security, compliance, IT, and business stakeholders to evaluate risks, coordinate approvals, and implement practical solutions that protect sensitive information without unnecessarily disrupting business operations
• Analyze recurring exceptions and control gaps to identify opportunities for policy improvements, process changes, and stronger preventive controls
• Maintain exception records, control-health metrics, runbooks, and supporting documentation to ensure security decisions are traceable and audit-ready

Skills

• Hands-on experience with Microsoft Purview Data Loss Prevention (DLP) , including creating, configuring, testing, tuning, and supporting the deployment of policies in an enterprise environment
• Experience working with DLP controls across Microsoft 365 workloads, including Exchange, SharePoint, OneDrive, and Teams
• Direct experience managing security-control exceptions end to end , including risk assessments, approval workflows, business justifications, compensating controls, expiration management, and periodic reviews
• Familiarity with Microsoft Purview sensitivity labeling, auto-labeling, and information classification
• Strong troubleshooting and analytical skills, with experience investigating policy behavior, identifying root causes, reducing false positives, and validating corrective actions
• Experience balancing technical implementation with day-to-day operational responsibilities, including security alerts, incidents, support tickets, and ongoing policy maintenance
• The ability to communicate effectively with both technical and nontechnical stakeholders, particularly when explaining security risks, control behavior, and business exceptions
• Midlevel to senior individual contributors who are still actively working with DLP technologies and security controls
• Someone who can work directly in Microsoft Purview, troubleshoot policies, and independently manage the operational and risk-management responsibilities that come with enterprise DLP
• General Microsoft 365 administration, SOC monitoring, or compliance auditing experience alone will not be sufficient without hands-on Purview DLP and exception governance experience
• Experience using ServiceNow for security exceptions and approval workflows, developing DLP control-health metrics, or supporting data protection programs within large, regulated enterprise environments

Benefits

• Fully remote

Company Overview

Company H1B Sponsorship