# Data Security Engineer [Audaxgroup](https://gurify.com/jobs?q=Audaxgroup) · Boston, MA · Posted yesterday [Security](https://gurify.com/jobs/security) [Apply on the original posting → (opens in a new tab)](https://job-boards.greenhouse.io/audaxgroup/jobs/4738458005) ## Job description Founded in 1999, Audax Group is a leading alternative investment manager with offices in Boston, New York, San Francisco, London and Hong Kong. With approximately $42 billion of assets under management and more than 475 employees, Audax is a leading capital partner for middle market companies, operating through three business lines: Audax Private Equity, Audax Private Debt, and Audax Strategic Capital. For more information, visit www.audaxgroup.com or follow Audax Group on LinkedIn. ### POSITION SUMMARY: The Microsoft Purview Data Security Engineer administers Microsoft Purview across the firm and is the hands-on owner of how the platform runs day to day, spanning data classification and sensitivity labeling, data loss prevention, insider risk, and records retention. The engineer translates data protection requirements set by Cybersecurity, Compliance, and Legal into working Purview policy, then tunes it, investigates what it detects, and keeps it accurate as the firm's data and workflows change. The role reports to the Head of Cybersecurity and partners daily with Legal, Compliance, HR, IT, and business unit leadership. ### RESPONSIBILITIES: - Information Protection and Data Classification - Build, test, and maintain custom sensitive information types, trainable classifiers, document fingerprints, and exact data match classifiers for firm specific content. - Administer sensitivity labels and label policies, including auto labeling, client side labeling, and label driven encryption, across SharePoint, Teams, Exchange, and OneDrive. - Diagnose labeling failures and misclassification, identify files that did not receive an intended label, and remediate the cause. - Validate classifier and label accuracy through structured spot checking with data owners, and tune detection logic on the results. - Apply sensitivity classification across firm content using sensitive information types, trainable classifiers, document fingerprints, exact data match, and SharePoint document metadata and managed properties. - Data Loss Prevention - Tune and extend DLP policies across Exchange, SharePoint, OneDrive, Teams, endpoint, and browser surfaces, and build new policies where coverage gaps are identified. - Maintain a DLP scenario register mapping each business risk to a trigger, policy, and enforcement mode, and move policies from audit only through notification to enforcement. - Monitor exfiltration channels across Microsoft 365, SaaS applications, and unsanctioned generative AI tools, using Purview alongside the firm’s cloud access and endpoint tooling. - Triage DLP incidents, reduce false alerting using policy telemetry, manage allowlists and exceptions so legitimate work is not blocked, and act as first point of contact when a policy affects a user. - Maintain DLP policy documentation, exception logs, and change records to audit standard. - Insider Risk Management - Tune Insider Risk Management policies, including data theft by departing users, and maintain priority user and priority content scoping. - Operate a repeatable departing employee activity lookback process and produce the review output Cybersecurity, Legal, and HR act on. - Investigate alerts to root cause and determine whether an alert reflects real user activity or a detection that needs tuning. - Records, Retention, and Data Discovery - Maintain retention labels, retention policies, auto apply rules, and disposition review, and evidence that data destruction completes as the retention schedule requires. - Administer Content Explorer, Activity Explorer, and Purview Audit to evidence label application, data movement, and retention outcomes. - Run content search and eDiscovery queries to answer internal data questions, quantify sensitive data exposure, and support Cybersecurity investigations. - Platform Operations and Automation - Automate policy deployment, configuration export, and recurring reporting with PowerShell and the Microsoft Graph API. - Troubleshoot tenant, licensing, admin role, and client side issues that block Purview functionality, with the IT infrastructure and identity teams. - Coordinate user acceptance testing with internal testers before policy or label changes reach production, and track test completion to closure. ### TECHNICAL QUALIFICATIONS: - Hands on administration of Purview DLP, sensitivity labels, retention, and custom classifiers in a production Microsoft 365 tenant. - Experience running Purview eDiscovery, Content Search, Purview Audit to investigate user and data activity in support of internal investigations. - PowerShell scripting, and working use of the Microsoft Graph API, for Purview policy and reporting automation. - Working knowledge of Microsoft Entra ID, formerly Azure Active Directory, and Exchange Online. - SharePoint Online and Teams security configuration. - Working knowledge of control frameworks such as SOC 2, NIST CSF, and ISO 27001, and of privacy regimes such as GDPR and CCPA. ### PREFERRED QUALIFICATIONS: - Certified Information Security Manager (CISM), SC-401 Information Security Administrator, or a comparable security certification. - Experience in private equity, investment management, or another regulated financial services environment, including MNPI handling and Regulation S-P expectations. - Insider Risk Management administration and Endpoint DLP deployment in a production tenant. ### REQUIREMENTS: - Bachelor’s degree in computer science, Information Technology, or equivalent practical experience. - 5+ years of experience in Microsoft 365 security, compliance, or information governance. - 3+ years of hands-on experience with Microsoft Purview. - Experience operating in a regulated or financial services environment. - Strong documentation and stakeholder communication skills. - Ability to collaborate across Legal, Compliance, IT, and business unit leadership, with strong interpersonal skills. - Ability to handle sensitive information, including MNPI, LP data, and personnel records, with strict confidentiality and discretion. LOCATION: Boston, MA – Hybrid 4 days in-office. These in-office requirements may be adjusted based on the needs of the business. For Massachusetts: The base salary range for this position is $140,000 - $165,000. The base salary range represents the estimated low and high end for this position at the time of this posting. Consistent with applicable law, compensation may vary and will be determined based on but not limited to, the skills, qualifications, and experience of the applicant along with the requirements of the position, and Audax reserves the right to modify this pay range at any time. An employee may also be eligible for annual discretionary incentive compensation based on performance. Audax offers a wide range of employee benefits, including health insurance, life insurance, disability insurance, paid time off (including sick leave, parental leave, volunteer leave, and vacation), charitable donation match, family support services (including Bright Horizons and Benefit Advocate Center), and a 401(k) in addition to other benefits. This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities and activities may change or new ones may be assigned at any time with or without notice. ### Audax Management Co. is an equal opportunity employer. Please note that Audax Group and its affiliated entities do not accept unsolicited resumes from a third-party recruiting agency not currently under a signed agreement. Any unsolicited resume that is sent to directly to Audax Group or one of its affiliated entities, or its employees, including those submitted to hiring managers by a third-party recruiting agency not currently under a signed agreement, will be considered property of Audax Group. If a third-party recruiting agency submits a resume without an agreement, Audax Group or its affiliated entities explicitly reserves the right to pursue and hire those candidate(s) without any financial obligation to the third-party recruiting agency. Any third-party recruiting agency should contact either a member of the Talent Acquisition or Human Resource team at Audax Group, in conjunction with a valid, fully executed contract for service based upon a specific job opening. **Live in Audaxgroup’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role. We remove it as soon as it disappears at source. ## More jobs like this - TL [Cloud Security Engineer](https://gurify.com/job/cloud-security-engineer-at-trm-labs-5f4f1a42c02b) TRM Labs · United States · 6 days ago - SP [Security Engineer - Detection and Response](https://gurify.com/job/security-engineer-detection-and-response-at-spotify-0f21d4c09c0e) Spotify · New York, NY · last week - AS [Security Engineer](https://gurify.com/job/security-engineer-at-assembledhq-280ac1c5d778) Assembledhq · New York City, NY · 2 weeks ago - PA [Security Systems Engineer](https://gurify.com/job/security-systems-engineer-at-palantir-d405a8a853b0) Palantir · Seattle, WA · 2 weeks ago - WR [Security engineer, detection and response](https://gurify.com/job/security-engineer-detection-and-response-at-writer-8c32be82d627) Writer · San Francisco, CA · 2 weeks ago - IN [Director of Sales & Business Development - EU Defense & Security](https://gurify.com/job/director-of-sales-business-development-eu-defense-security-at-innoviz-b763024b02cd) Innoviz · Rosh Ha'Ayin, Israel, IL · 5 days ago ```json {"@context":"https://schema.org/","@type":"JobPosting","title":"Data Security Engineer","description":"\u003Cp\u003EFounded in 1999, Audax Group is a leading alternative investment manager with offices in Boston, New York, San Francisco, London and Hong Kong. With approximately $42 billion of assets under management and more than 475 employees, Audax is a leading capital partner for middle market companies, operating through three business lines: Audax Private Equity, Audax Private Debt, and Audax Strategic Capital.\u003C/p\u003E\u003Cp\u003EFor more information, visit www.audaxgroup.com or follow Audax Group on LinkedIn.\u003C/p\u003E\u003Ch3\u003EPOSITION SUMMARY:\u003C/h3\u003E\u003Cp\u003EThe Microsoft Purview Data Security Engineer administers Microsoft Purview across the firm and is the hands-on owner of how the platform runs day to day, spanning data classification and sensitivity labeling, data loss prevention, insider risk, and records retention. The engineer translates data protection requirements set by Cybersecurity, Compliance, and Legal into working Purview policy, then tunes it, investigates what it detects, and keeps it accurate as the firm\u0026#39;s data and workflows change. The role reports to the Head of Cybersecurity and partners daily with Legal, Compliance, HR, IT, and business unit leadership.\u003C/p\u003E\u003Ch3\u003ERESPONSIBILITIES:\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EInformation Protection and Data Classification\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EBuild, test, and maintain custom sensitive information types, trainable classifiers, document fingerprints, and exact data match classifiers for firm specific content.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAdminister sensitivity labels and label policies, including auto labeling, client side labeling, and label driven encryption, across SharePoint, Teams, Exchange, and OneDrive.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDiagnose labeling failures and misclassification, identify files that did not receive an intended label, and remediate the cause.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EValidate classifier and label accuracy through structured spot checking with data owners, and tune detection logic on the results.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EApply sensitivity classification across firm content using sensitive information types, trainable classifiers, document fingerprints, exact data match, and SharePoint document metadata and managed properties.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EData Loss Prevention\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ETune and extend DLP policies across Exchange, SharePoint, OneDrive, Teams, endpoint, and browser surfaces, and build new policies where coverage gaps are identified.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMaintain a DLP scenario register mapping each business risk to a trigger, policy, and enforcement mode, and move policies from audit only through notification to enforcement.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMonitor exfiltration channels across Microsoft 365, SaaS applications, and unsanctioned generative AI tools, using Purview alongside the firm\u2019s cloud access and endpoint tooling.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ETriage DLP incidents, reduce false alerting using policy telemetry, manage allowlists and exceptions so legitimate work is not blocked, and act as first point of contact when a policy affects a user.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMaintain DLP policy documentation, exception logs, and change records to audit standard.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EInsider Risk Management\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ETune Insider Risk Management policies, including data theft by departing users, and maintain priority user and priority content scoping.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EOperate a repeatable departing employee activity lookback process and produce the review output Cybersecurity, Legal, and HR act on.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EInvestigate alerts to root cause and determine whether an alert reflects real user activity or a detection that needs tuning.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ERecords, Retention, and Data Discovery\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMaintain retention labels, retention policies, auto apply rules, and disposition review, and evidence that data destruction completes as the retention schedule requires.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAdminister Content Explorer, Activity Explorer, and Purview Audit to evidence label application, data movement, and retention outcomes.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ERun content search and eDiscovery queries to answer internal data questions, quantify sensitive data exposure, and support Cybersecurity investigations.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPlatform Operations and Automation\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAutomate policy deployment, configuration export, and recurring reporting with PowerShell and the Microsoft Graph API.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ETroubleshoot tenant, licensing, admin role, and client side issues that block Purview functionality, with the IT infrastructure and identity teams.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECoordinate user acceptance testing with internal testers before policy or label changes reach production, and track test completion to closure.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ETECHNICAL QUALIFICATIONS:\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EHands on administration of Purview DLP, sensitivity labels, retention, and custom classifiers in a production Microsoft 365 tenant.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience running Purview eDiscovery, Content Search, Purview Audit to investigate user and data activity in support of internal investigations.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPowerShell scripting, and working use of the Microsoft Graph API, for Purview policy and reporting automation.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWorking knowledge of Microsoft Entra ID, formerly Azure Active Directory, and Exchange Online.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESharePoint Online and Teams security configuration.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWorking knowledge of control frameworks such as SOC 2, NIST CSF, and ISO 27001, and of privacy regimes such as GDPR and CCPA.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EPREFERRED QUALIFICATIONS:\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003ECertified Information Security Manager (CISM), SC-401 Information Security Administrator, or a comparable security certification.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience in private equity, investment management, or another regulated financial services environment, including MNPI handling and Regulation S-P expectations.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EInsider Risk Management administration and Endpoint DLP deployment in a production tenant.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EREQUIREMENTS:\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EBachelor\u2019s degree in computer science, Information Technology, or equivalent practical experience.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003E5\u002B years of experience in Microsoft 365 security, compliance, or information governance.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003E3\u002B years of hands-on experience with Microsoft Purview.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience operating in a regulated or financial services environment.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStrong documentation and stakeholder communication skills.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAbility to collaborate across Legal, Compliance, IT, and business unit leadership, with strong interpersonal skills.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAbility to handle sensitive information, including MNPI, LP data, and personnel records, with strict confidentiality and discretion.\u003C/li\u003E\u003C/ul\u003E\u003Cp\u003ELOCATION: Boston, MA \u2013 Hybrid 4 days in-office. These in-office requirements may be adjusted based on the needs of the business.\u003C/p\u003E\u003Cp\u003EFor Massachusetts: The base salary range for this position is $140,000 - $165,000. The base salary range represents the estimated low and high end for this position at the time of this posting. Consistent with applicable law, compensation may vary and will be determined based on but not limited to, the skills, qualifications, and experience of the applicant along with the requirements of the position, and Audax reserves the right to modify this pay range at any time. An employee may also be eligible for annual discretionary incentive compensation based on performance.\u003C/p\u003E\u003Cp\u003EAudax offers a wide range of employee benefits, including health insurance, life insurance, disability insurance, paid time off (including sick leave, parental leave, volunteer leave, and vacation), charitable donation match, family support services (including Bright Horizons and Benefit Advocate Center), and a 401(k) in addition to other benefits.\u003C/p\u003E\u003Cp\u003EThis job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities and activities may change or new ones may be assigned at any time with or without notice.\u003C/p\u003E\u003Ch3\u003EAudax Management Co. is an equal opportunity employer.\u003C/h3\u003E\u003Cp\u003EPlease note that Audax Group and its affiliated entities do not accept unsolicited resumes from a third-party recruiting agency not currently under a signed agreement. Any unsolicited resume that is sent to directly to Audax Group or one of its affiliated entities, or its employees, including those submitted to hiring managers by a third-party recruiting agency not currently under a signed agreement, will be considered property of Audax Group. If a third-party recruiting agency submits a resume without an agreement, Audax Group or its affiliated entities explicitly reserves the right to pursue and hire those candidate(s) without any financial obligation to the third-party recruiting agency. Any third-party recruiting agency should contact either a member of the Talent Acquisition or Human Resource team at Audax Group, in conjunction with a valid, fully executed contract for service based upon a specific job opening.\u003C/p\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"data-security-engineer-at-audaxgroup-eae419783b57"},"url":"https://gurify.com/job/data-security-engineer-at-audaxgroup-eae419783b57","datePosted":"2026-10-06","validThrough":"2026-11-21T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Audaxgroup","sameAs":"https://job-boards.greenhouse.io/audaxgroup"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"US","addressLocality":"Boston"}}} ``` ```json {"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"United States","item":"https://gurify.com/jobs/united-states"},{"@type":"ListItem","position":3,"name":"Data Security Engineer","item":"https://gurify.com/job/data-security-engineer-at-audaxgroup-eae419783b57"}]} ```