Data Security Team Lead

About Exquitech Group and the Role

Exquitech Group is seeking a Data Security Team Lead to spearhead the implementation of data security, classification, retention, and governance policies for customers across the MEA region. Based in Riyadh, Saudi Arabia, this full-time role requires 5-10 years of experience and involves leading a team focused on Microsoft Purview solutions. The position offers opportunities for growth and expanded leadership within the data security domain.

Key Responsibilities

• Design, implement, and optimize data security solutions using Microsoft Purview or other leading DLP and data governance tools.
• Develop and enforce DLP, Insider Risk Management, DSPM for AI, and CASB policies to prevent unauthorized data access and ensure compliance.
• Implement data classification and labeling strategies to enhance data protection.
• Define and manage data retention policies in alignment with regulatory and business requirements.
• Deploy and manage AIP on-premises scanner to classify and protect on-premises data.
• Integrate CASB with on-premises firewalls to strengthen security controls and enhance visibility into both cloud and on-premises environments.
• Lead the implementation and configuration of Microsoft Priva and Microsoft Purview Data Map.
• Ensure compliance with industry regulations such as GDPR, NCA, and ISO 27001.
• Support Data Security Posture Management (DSPM) initiatives by assessing risks, monitoring data flows, and optimizing security policies.
• Build templates and automation for Data Security & Governance Implementation, ensuring consistency and efficiency.
• Automate policy deployments and security configurations using PowerShell, APIs, and Microsoft Security & Compliance tools.
• Deploy MDM, MAM, and Conditional Access policies to address security gaps and enhance access controls.
• Oversee the implementation of security-related projects, from initial scoping to post-deployment support, ensuring timely and budget-compliant execution.
• Develop High-Level Designs (HLD) and Low-Level Designs (LLD) for project implementation, assess customer environments, and create RFIs and IRLs as needed.

Monitoring, Incident Response, and Optimization

• Monitor and respond to data security incidents, ensuring proper investigation and resolution.
• Analyze data security risks and implement best practices to mitigate threats.
• Optimize security policies and controls based on evolving business needs.

Team Leadership and Collaboration

• Supervise at least two team members, with potential for increased leadership responsibilities.
• Work closely with cross-functional teams and customers to align security policies with business objectives and ensure seamless implementation.
• Collaborate with stakeholders to continuously enhance security posture and governance policies.
• Deliver end-user and administrator workshops to ensure proper understanding and adoption of data security, classification, governance policies, and compliance tools.
• Contribute to Scope of Work (SOW) and project scoping, defining clear deliverables and implementation roadmaps.
• Develop and maintain implementation documentation, end-user guides, and administrative manuals to support technology adoption.
• Ensure the availability and functionality of a technical test environment for internal testing and experimentation with new technologies, coordinating maintenance, updates, and enhancements as needed.

Required Qualifications and Certifications

• 5-10 years of experience in data security, compliance, and governance.
• Strong expertise in Microsoft Purview.
• Experience with third-party data security solutions is highly valued.
• Familiarity with MDM & MAM solutions, particularly Microsoft Intune, as well as conditional access policies is a plus.
• Required Certifications:
  • GIAC Certified Data Protection or an equivalent certification.
  • Vendor certifications in DLP, Data Classification, Litigation Holds, or governance tools.

Preferred Certifications

• Microsoft Certified: Information Protection Administrator Associate (SC-400)
• Cybersecurity Architect Expert (SC-100)