Join NTT DATA, a global leader in business and technology services, as a M365 Security Engineer in Bangalore. This role is pivotal in architecting, deploying, and managing our comprehensive M365 data protection ecosystem. You will be the primary technical authority, guiding the classification, labeling, and protection of sensitive information across the M365 suite and extended services. This position effectively bridges high-level compliance requirements with technical enforcement to ensure robust data security in a cloud-first environment.

NTT DATA is committed to fostering an inclusive, adaptable, and forward-thinking organization. We seek passionate individuals eager to grow with us. If you thrive in an innovative environment and want to make a significant impact, we encourage you to apply.

Key responsibilities include designing and implementing a global Microsoft Purview strategy, integrating Information Protection and DLP across Exchange, SharePoint, OneDrive, and Teams. Develop and manage advanced DLP policies to safeguard PII, PHI, and IP, ensuring a balance between security and user productivity. Collaborate with Legal, HR, and Risk teams to translate business needs into actionable technical controls. Manage eDiscovery workflows and oversee Insider Risk Management alerts, acting as the Tier 3 escalation point for security incidents and mentoring junior engineers on M365 security best practices.

We are looking for candidates with 6-9 years of experience in infrastructure or security, with a minimum of 4 years focused exclusively on the M365 security suite. A proven track record of migrating legacy on-premises data protection approaches to modern, identity-driven cloud security is essential. Required technical skills include Microsoft Purview, Core M365 Security, Information Protection, Encryption, DLP, Message Records Management, Retention Policies, Data Lifecycle Management, Entra ID (Azure AD), Conditional Access, Privileged Identity Management (PIM), Advanced PowerShell scripting, and Cloud Ecosystem integration with SIEMs like Microsoft Sentinel.

Relevant certifications such as SC-100, SC-400, or SC-401 are required, with CISSP being a significant advantage. The ideal candidate can effectively communicate complex security policies to executive leadership without using excessive jargon.