Enterprise Data Governance with Purview

I need an experienced engineer who can take Microsoft Purview from a blank slate to a fully-functioning enterprise data governance platform that meets GDPR, ISO 27001, SOC 2 and several industry-specific requirements. My immediate pain point is Data Classification and Lifecycle Management. Within that, the single most critical deliverable is a set of rock-solid data retention schedules that can be enforced automatically through Purview. Everything else—sensitivity labels in M365, DLP policies, insider-risk mappings and the new AI guardrails—must align to those schedules and to the overall operating model you design. Scope of work • Draft and socialise the operating model: clarify data ownership, stewardship, custodianship and a practical RACI that fits our organisation. • Define enterprise standards for data classification, lifecycle management and data quality, ensuring they dovetail with the retention schedules you create. • Stand up and configure Microsoft Purview: sensitivity labels, DLP, insider-risk rules, compliance mappings and AI guardrails. • Map every Purview policy back to GDPR, ISO 27001, SOC 2 and our sector frameworks so we can demonstrate control lineage during audits. Acceptance criteria 1. Approved operating-model document with RACI matrix. 2. Published retention schedules loaded into Purview and tested end-to-end. 3. Purview portal shows green status for sensitivity labels, DLP policies, insider-risk rules and AI guardrails. 4. Compliance dashboard evidences mappings to all stated regulations. 5. Handover pack with configuration scripts (PowerShell/REST), architecture diagrams and administrator run-book. If you have delivered similar Purview rollouts and can show measurable audit success, let’s talk.

Mã dự án: 40280109