This role will be hybrid to Sheffield, UK, 3 days/week onsite

Contract inside IR35

Deep expertise in Rubrik Enterprise Backup solutions (or other tenant backup software).

Responsibilities

• Define target-state architecture for Purview retention, records management, and eDiscovery at enterprise scale.
• Map regulatory obligations (e.g., MiFID II record-keeping, SEC/FINRA retention, GDPR lawful basis & deletion windows, UK DPA) to enforceable Purview policies.
• Design event‑based retention (e.g., contract execution, trade events) and immutable record scenarios; integrate with data lifecycle and disposition workflows.
• Mailbox/Teams retention, SharePoint/OneDrive retention strategies, and litigation hold patterns with minimal blast radius.
• Build and roll out retention labels/policies, auto‑classification, trainable classifiers, adaptive scopes, and disposition reviews.
• Integrate with Microsoft eDiscovery (Premium), Audit, and DLP; align with Legal Hold and case management processes.
• Engineer scale: policy distribution, performance, tenant‑wide scoping, differential targeting by region/legal entity.
• Automate via PowerShell/Graph, and instrument telemetry/alerting (e.g., Sentinel/KQL, compliance portals).
• Define controls, evidence artefacts, and reporting for internal audit and regulatory assurance.
• Create runbooks for policy changes, exceptions, break‑glass procedures, and incident response around retention/records.
• Contribute to RACI, data classification schemas, and control testing.

Required Skills

• 7+ years in Microsoft 365/Purview compliance, with proven delivery of retention and records management at enterprise scale.
• Deep hands-on expertise in: Purview Information Governance, Records Management, Retention Labels/Policies, Event‑based retention, Disposition reviews, eDiscovery (Premium), Litigation Hold, Audit.
• Strong knowledge of Exchange/SharePoint/OneDrive/Teams data architecture and workloads.
• Scripting & automation: PowerShell, Microsoft Graph; CI/CD for policy artefacts.
• Regulatory knowledge: FCA/PRA, MiFID II, SEC/FINRA, GDPR/UK DPA.
• Performance/scaling in tenants >100k users in regulated environments.