Work with Avanade customers to design and implement Zero Trust architectures using Microsoft security solutions, focusing on data protection.
Lead the deployment and configuration of: Microsoft Purview for data governance, compliance, Information Protection, Data Loss Prevention and Inside Risk Management Microsoft Defender for Endpoint, Identity, and Cloud Apps Microsoft Defender for Cloud for cloud security posture management
Develop and maintain data classification, labelling, and retention policies.
Develop and implement DSPM strategies for AI systems, ensuring secure data flows, model integrity, and privacy compliance.
Conduct data protection risk assessments and recommend mitigation strategies.
Support security workshops, discovery sessions, and technical governance activities
Provide guidance on compliance frameworks, data lifecycle management, and privacy controls
Provide technical guidance and training to internal teams on Microsoft security tools.
Stay current with emerging threats, vulnerabilities, and Microsoft product updates.

Proven experience with Microsoft Security technologies including Microsoft Purview, Defender, Sentinel, and Entra ID.
Hands-on experience with DLP policy design, migration and refinement
Strong understanding of data protection regulations (e.g. Privacy Act 1988, GDPR, CCPA, DPA 2018, ISO 27001, NIST, EU AI Act).
Familiarity with AI security concepts, including DSPM, model governance, and data lineage.
Understanding of Zero Trust architecture and cloud-native security controls.
Excellent communication and stakeholder engagement skills.
Relevant certifications (e.g., SC-401, SC-200, AZ-500, CISSP, CIPP/E, AI-specific certs) are highly desirable.
Experience in consulting and advisory discussions with clients and other consulting firms
Experience in owning the design and implementation of technology solutions

Data Protection Consultant – Architect

Key skills