M365 Purview Compliance Design Architect

Job Title: M365 Purview Compliance Design Architect

Location: Sheffield- 3Days/week Onsite

Duration: 6months+ Contract Inside IR35

550GBP/Day Inside IR35.

Responsibilities

• Define target-state architecture for Purview retention, records management, and eDiscovery at enterprise scale.
• Map regulatory obligations (eg, MiFID II record-keeping, SEC/FINRA retention, GDPR lawful basis & deletion windows, UK DPA) to enforceable Purview policies.
• Design event-based retention (eg, contract execution, trade events) and immutable record scenarios; integrate with data life cycle and disposition workflows.
• Mailbox/Teams retention, SharePoint/OneDrive retention strategies, and litigation hold patterns with minimal blast radius.
• Build and roll out retention labels/policies, auto-classification, trainable classifiers, adaptive scopes, and disposition reviews.
• Integrate with Microsoft eDiscovery (Premium), Audit, and DLP; align with Legal Hold and case management processes.
• Engineer scale: policy distribution, performance, tenant-wide scoping, differential targeting by region/legal entity.
• Automate via PowerShell/Graph, and instrument telemetry/alerting (eg, Sentinel/KQL, compliance portals).
• Define controls, evidence artefacts, and reporting for internal audit and regulatory assurance.
• Create runbooks for policy changes, exceptions, break-glass procedures, and incident response around retention/records.
• Contribute to RACI, data classification schemas, and control testing.

Required Skills

• 8-10+ years in Microsoft 365/Purview compliance, with proven delivery of retention and records management at enterprise scale.
• Deep hands-on expertise in: Purview Information Governance, Records Management, Retention Labels/Policies, Event-based retention, Disposition reviews, eDiscovery (Premium), Litigation Hold, Audit.
• Strong knowledge of Exchange/SharePoint/OneDrive/Teams data architecture and workloads.
• Scripting & automation: PowerShell, Microsoft Graph; CI/CD for policy artefacts.
• Regulatory knowledge: FCA/PRA, MiFID II, SEC/FINRA, GDPR/UK DPA.
• Performance/scaling in tenants >100k users in regulated environments.