Microsoft Purview Senior Consultant (m/w/d)

This role is a natural next step for security consultants with 3 – 4 years of IT security experience who want to specialize in Microsoft data security and compliance. You will grow through customer engagements, coaching from more senior colleagues and continuous learning, with a clear path towards a Purview Expert role.

You will contribute to Microsoft Purview projects across the full delivery lifecycle. Your day-to-day tasks will typically include:

• Classification & Labelling: Configure and deploy sensitivity labels, sensitive information types and auto-labelling policies in Microsoft Purview, based on designs prepared with other consultants. Support pilot rollouts and iterate based on user feedback.
• Data Loss Prevention (DLP): Implement DLP policies across Exchange, SharePoint, OneDrive, Teams and endpoints. Tune rules to balance protection with usability, analyse alerts and reduce false positives.
• Data Retention & Records Management: Build retention labels and policies that map to the customer’s legal, regulatory and contractual obligations. Assist in disposition reviews and lifecycle management scenarios.
• Insider Risk & Compliance Monitoring: Assist in configuring Insider Risk Management, Communication Compliance and audit / eDiscovery use cases, and help operational teams interpret the resulting signals.
• Integration with the Microsoft Security Stack: Configure the interactions between Purview and Defender for Cloud Apps, Defender for Endpoint and Microsoft Entra, contributing to an end-to-end Defender XDR data protection story.
• Documentation & Handover: Produce clear design documents, configuration baselines, runbooks and knowledge transfer material so that customer teams can operate the solution after go-live.
• Stakeholder Collaboration: Work closely with customer stakeholders (IT, Security, Legal, DPO, Compliance) as well as internal NVISO teams to gather requirements, validate designs and demo solutions.
• Support & Continuous Improvement: Provide second-line support on Purview deployments, be familiar8 with the Microsoft Purview roadmap and related technologies and continuously improve the delivery approach and reusable material.

Requirements

• 3 – 4 years of professional experience in IT security, including exposure to Microsoft 365. Azure or cloud security in general is considered a plus.
• Purview hands-on experience with at least one year working with Microsoft Purview capabilities: sensitivity labels, DLP, retention, eDiscovery, Insider Risk and/or Data Governance; in a customer or enterprise environment.
• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Data Science or a related field, or equivalent experience.
• You hold citizenship in one of the 32 NATO member states or the Austrian citizenship .

Technical Skills

• Solid working knowledge of the Microsoft 365 platform (Exchange Online, SharePoint Online, OneDrive, Teams) and a good understanding of the Microsoft Entra identity model.
• Familiarity with the Microsoft Purview portal and its core solutions: Information Protection, Data Loss Prevention, Data Lifecycle Management and Records Management.
• Understanding of how Purview integrates with Defender for Cloud Apps, Defender for Endpoint and the broader Defender XDR ecosystem.
• Basic scripting skills in PowerShell (Exchange Online, Security & Compliance) to automate deployment, reporting and troubleshooting tasks.
• Regulatory & Domain Knowledge
• Working knowledge of data protection regulations such as GDPR, and awareness of frameworks like NIS2, ISO/IEC 27001 and DORA and how they translate into data protection controls.
• Ability to translate legal and business requirements into concrete data classification, DLP and retention rules.

Soft Skills & Languages

• Strong communication skills with the ability to explain technical concepts to non-technical stakeholders and to write clear documentation.
• Fluency in spoken and written German and English
• A consulting mindset: curious, structured, customer-focused and comfortable working on several engagements in parallel.

Nice to Have

• Microsoft certifications such as SC-401 (Information Protection and Compliance Administrator), SC-200 or AZ-500.
• Other Data Privacy related certifications
• Experience with adjacent security tooling (Microsoft Sentinel, third-party DLP or CASB solutions) and with change management around end-user security controls.

Benefits

At NVISO, we care. We are committed to offering you a highly competitive remuneration package including financial and non-financial components:

• Working and learning from the best people in the European cyber security industry. We have multiple SANS Instructors working at NVISO, our staff has presented at popular hacking conferences (BlackHat, BruCON, OWASP, etc) and all of our technical staff can acquire deep technical security certifications (GSE, GXPN, GREM, GCFA, OSCP, etc);
• Generous training budget of 10.000 EUR + 10 man days for attending lectures rolling over 2 years;
• An annual gross base salary between 69.000 EUR and 87.000 EUR, depending on your experience;
• Regular team-building and fun events;
• Our commitment to coach and counsel you and help you grow; each employee receives a personal coach within the team, whose role is to ensure your well-being and helps you grow in your career!
• Flexible working hours and home office possibilities (incl. working abroad weeks within the EU);
• Business Bike Leasing;
• BahnCard 50 1st class + public transfer ticket or EGYM WellPass;
• 30 holidays;
• Company Pension Scheme;
• Cool offices in the center of Frankfurt and Munich (with BBQ, kicker table, table tennis, etc.).

IF YOU'RE INTERESTED, PLEASE SEND US YOUR APPLICATION!

WE'RE LOOKING FORWARD TO MEETING YOU!

Disclaimer on the Use of AI Tools in the Application Process

Please be aware that the creation and submission of application documents (e.g. CV, cover letter, case studies, etc.) using AI-powered tools is only permitted to a limited extent .

Our expectations:

Application documents must authentically reflect your own qualifications, personality, and motivation.

The use of AI for supportive purposes (e.g. spell-checking, improving wording) is acceptable.

Fully generated application documents created by AI without personal adaptation or review are not permitted.

Under no circumstances may NVISO information, data, or documents be uploaded to or processed by external AI tools.

We reserve the right to exclude applications from the selection and interview process that are clearly created primarily or exclusively by AI and show no recognizable personal input.

The purpose of this policy is to ensure a fair and transparent recruitment process and to obtain an authentic impression of our applicants.

Find Jobs in Germany on Arbeitnow

We show an excerpt and a link, and the full text when the source allows it. Brands and logos shown belong to their owners.

Source: Statistisches Bundesamt (Destatis), table; dl-de/by-2-0; StarIn's calculation