Microsoft Security Solution Architect

Project overview

Job Title: Microsoft Purview Data Governance Consultant

Project details

United Kingdom (Remote Working)

Salary/Rate: £500-£550 per day (Inside IR35)

Start Date: 29th of October

Job Type: Short term contract

An opportunity has arisen for an experienced Microsoft Purview Data Governance Consultant to support an enterprise data governance and information life cycle management project within a complex Microsoft 365 environment.

The role will focus on assessing existing data retention and records management practices, identifying compliance gaps and designing practical governance controls using Microsoft Purview. You will play a key role in establishing a defensible approach to information life cycle management, including retention policies, records declaration, disposition reviews and secure data disposal.

You will work closely with information governance, legal, IT, records management and business stakeholders to understand existing arrangements, define requirements and deliver a practical solution. This is a hands-on consultancy assignment requiring strong technical knowledge of Microsoft Purview alongside a solid understanding of enterprise information governance, regulatory retention requirements and defensible disposal.

The contract will be delivered remotely across a defined 18-day schedule, covering discovery, design, configuration, testing, pilot implementation and project closure.

Job Responsibilities/Objectives

Required Skills/Experience

The ideal candidate will have the following:

Desirable Skills/Experience

Although not essential, the following skills are desired by the client:

The successful candidate must be available across the proposed delivery schedule, covering discovery and design in late October and November, build and pilot activities in late November and early December, and project closure on 7th December. Some flexibility may be available for the right consultant.

If you are interested in this opportunity, please apply now with your updated CV in Microsoft Word/PDF format.

Disclaimer

Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies.

Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.

• Plan and facilitate discovery workshops with information governance, legal, IT, application owners and relevant business stakeholders.
• Assess up to 20 enterprise applications against retention schedules, including personal data holdings, retention obligations, deletion capabilities, disposal evidence and integration options.
• Review existing data asset registers, records retention schedules, Microsoft 365 retention and labelling configurations, legal holds, Exchange MRM and backup arrangements.
• Produce a current-state assessment, gap analysis and prioritised risk register, identifying areas of non-compliance and opportunities for improvement.
• Design an information life cycle operating model covering governance responsibilities, decision rights, disposition reviews, exceptions, legal holds and disposal suspension.
• Develop a file plan aligned with approved retention schedules and records management requirements.
• Produce a Microsoft Purview high-level design covering retention labels and policies, auto-labelling, adaptive scopes, event-based retention, record declaration, disposition review, preservation lock, monitoring and reporting.
• Configure and validate a controlled pilot across up to two business areas and 20-30 users, using simulation mode before enforcement.
• Lead functional validation and document end-to-end disposal processes, including evidence capture and auditability.
• Assess third-party applications and backup platforms to identify retention and disposal control gaps, recommending appropriate technical, integrated or procedural solutions.
• Evaluate interactions between Microsoft 365 retention, eDiscovery, legal holds and existing information governance controls.
• Document configuration decisions, testing outcomes, risks, assumptions and implementation recommendations.
• Deliver knowledge transfer for administrators and reviewers, ensuring the solution can be supported and maintained effectively.
• Produce a roadmap for wider implementation across the enterprise estate and present findings and recommendations to senior stakeholders.
• A proven track record delivering Microsoft Purview Data Lifecycle Management and Records Management solutions within enterprise Microsoft 365 environments.
• Hands-on expertise in Microsoft Purview retention labels, label policies, auto-labelling, adaptive scopes, event-based retention and records declaration.
• Experience with disposition reviews, regulatory records, preservation lock and the operational implications of enforcing retention and disposal controls.
• A strong understanding of Microsoft 365 retention processing, Exchange MRM, eDiscovery and legal holds.
• Knowledge of retention and governance considerations across Microsoft Teams content, meeting recordings, transcripts and Copilot interaction history.
• Experience assessing existing retention configurations, identifying conflicting policies and recommending appropriate remediation.
• Strong information governance and records management knowledge, including file-plan design, defensible disposal, proof of disposal, legal holds and data subject rights.
• The ability to assess third-party applications and backup platforms against retention requirements and identify appropriate control measures.
• Experience producing high-quality assessments, solution designs, risk registers, operating models, test evidence, configuration documentation and implementation roadmaps.
• Strong workshop facilitation and stakeholder management skills, with the ability to engage legal, IT, Data Protection Officers, records management teams and senior business stakeholders.
• The ability to translate regulatory and governance requirements into practical, supportable technical controls.
• A structured and evidence-led approach, with strong attention to documentation, auditability and acceptance criteria.
• The ability to work independently, challenge unclear requirements and proactively identify delivery risks.
• Microsoft compliance, information protection or records management certifications.
• Experience working within regulated environments, including life sciences, research or healthcare.
• Familiarity with Microsoft Purview Data Map and Unified Catalog, particularly in assessing suitability and future roadmap options.
• Experience delivering information governance or records management transformation initiatives across complex enterprise application estates.
• Experience working with senior sponsors and multidisciplinary teams to agree governance controls and implementation priorities.
• Start: 29 October 2026
• Duration: 4 weeks
• Location: London, UK, GB
• Rate: 63-69 EUR/h