• Work to protect corporate data and information, being responsible for the implementation, administration and evolution of Data Loss Prevention (DLP) and Data Governance solutions in the Microsoft ecosystem. • Implement, administer and maintain Data Loss Prevention (DLP) policies in Microsoft 365 environments and corporate devices. • Configure, review and optimize data protection policies using Microsoft Purview. • Continuously monitor events and alerts related to data protection, conducting incident analysis and investigations. • Identify and mitigate risks related to the leakage of confidential information. • Implement and administer sensitivity labels, classification and document protection policies. • Manage retention policies and information lifecycle (Data Lifecycle Management) and support Records Management initiatives. • Support eDiscovery, Communication Compliance and security audits when required. • Manage email protection capabilities using Microsoft Defender for Office 365.

• Act as a Data and Information Security Analyst with a technical and consultative focus on protecting sensitive data and information. • Responsible for implementing and maintaining classification, labeling and protection policies, as well as Data Loss Prevention (DLP) technologies and regulatory compliance, ensuring the secure lifecycle of information. • Work with Microsoft Information Protection, Microsoft Purview and Data Loss Prevention (DLP) to identify, classify and protect sensitive data across data infrastructures, endpoints, e-mail, SharePoint, Teams, OneDrive, etc. • Configure DLP policies based on financial, contractual and regulatory information (LGPD, SOX, PCI-DSS). • Continuously improve DLP policies based on events, false positives and exception cases. • Monitor DLP alerts, perform analysis and collaborate with incident response teams. • Support investigations conducted by other teams by providing technical input and context on DLP policies, classification rules and potential leakage vectors. • Work together with Data Stewards. • Conduct mapping, categorization and classification of critical/sensitive data. • Define and maintain OKRs and maturity indicators related to technical data governance and leakage prevention activities. • Demonstrate results through dashboards, executive reports and technical evidence. • Ensure compliance with standards and legislation such as LGPD, GDPR, SOX, HIPAA, PCI-DSS, ISO 27001:2022 and NIST. • Support internal/external audits with compliance evidence related to DLP, classification and governance. • Conduct trainings, workshops and awareness campaigns on secure use and classification of information.

• Work with Microsoft Information Protection, Microsoft Purview and Data Loss Prevention (DLP) to identify, classify, and protect sensitive data across data infrastructures, devices, email, SharePoint, Teams and OneDrive. • Continuously improve DLP policies based on events, false positives and exception cases. • Monitor DLP alerts, perform analyses and collaborate with incident response teams. • Support investigations conducted by other teams by providing technical inputs and contextual information about DLP policies. • Work together with Data Stewards who act as focal points to ensure data quality, appropriate use, security and correct data classification. • Conduct mapping, categorization and classification of critical/sensitive data, aligning with the owners of each data domain (e.g., finance, legal, HR). • Define and maintain OKRs and maturity indicators related to technical data governance and data leakage prevention activities. • Ensure compliance with regulations and legislation such as LGPD, GDPR, SOX, HIPAA and PCI-DSS.

• Assist the Vulnerability Operations team with the review and acceptance of Missions, Patch Verifications, and vulnerability reports • Bypass customer patch attempts, create suspected vulnerability reports, and exploit real world vulnerabilities • Work remotely with seasoned Computer Security Analysts • Learn what it's like to review complex vulnerability reports