Sr Data Protection & Governance Analyst

Help build a security-first culture where technology enables the business instead of slowing it down. As our Data Protection & Governance Analyst, you'll lead Microsoft 365 data protection, AI-powered employee enablement, and enterprise governance initiatives that safeguard critical information while making security simple, practical, and scalable across the organization.

Starkey is a world leader in the manufacturing and distribution of advanced hearing technologies. We are in the business of connecting people and changing lives. Our teams come to work each day focused on ensuring people everywhere have the products and services they need to hear better and live better.

Founded in 1967 by Bill Austin, Starkey is known for our cutting-edge hearing health innovations, industry-leading research and development, and not being afraid to push the edge of what’s possible.

We are headquartered in Eden Prairie, Minnesota, have over 5,000 employees in 29 facilities across the globe, and do business in more than 100 markets worldwide.

Watch this video to see more of what sets Starkey apart: https://youtu.be/9cUYwTlCepg?si=wkovx8_R_iINfrc6

JOB RESPONSIBILITIES/RESULTS

JOB SUMMARY DESCRIPTION / PRIMARY PURPOSE OF JOB

The Data Protection & Governance Analyst owns the day-to-day operation, governance, and adoption of our data protection program across the Microsoft 365 (E5) environment. This role consolidates a fast-growing body of work — Data Loss Prevention (DLP), sensitivity labeling, and the administration of enterprise-wide security settings — that is currently distributed across existing team members alongside their primary security-operations duties.

The Data Protection & Governance Analyst will be the single accountable owner for DLP and information-protection controls in Microsoft Purview, will administer security and compliance settings across our largest enterprise SaaS platforms (starting with Microsoft 365), and will lead the employee training and organizational change management required for those controls to be adopted and sustained rather than worked

• Data Loss Prevention and Information Protection
  • Own the design, configuration, tuning, and validation of DLP policies in Microsoft Purview across email, SharePoint, OneDrive, Teams, and endpoints.
  • Build and maintain Sensitive Information Types (SITs), including regex-based detection and trainable classifiers, and validate detection accuracy to reduce false positives and coverage gaps.
  • Administer and govern the sensitivity-label taxonomy, auto-labeling policies, and label-based protection, including the dynamic group / scoping logic that ensures full population coverage.
  • Investigate DLP alerts and policy matches, triage incidents, and partner with the SOC/MDR provider and Security Engineering on escalations.

• Enterprise SaaS Security Administration
  • Administer the security, compliance, and data-governance settings of large enterprise SaaS solutions, with Microsoft 365 / Purview as the primary platform.
  • Maintain configuration baselines, document control settings, and support periodic posture assessments and audit/risk-assessment requests.
  • Coordinate data-protection requirements for new integrations and data flows (e.g., analytics pipelines, mirrored/replicated data stores, and SaaS-to-SaaS connections).
  • Investigate DLP alerts and policy matches, triage incidents, and partner with the SOC/MDR provider and Security Engineering on escalations.

• Training and Change Management
  • Develop and deliver end-user training and enablement on sensitivity labels, DLP behavior, and secure data-handling expectations.
  • Lead the change management for new and updated controls — communications, rollout sequencing, stakeholder readiness, and feedback loops — so controls are adopted with minimal business disruption.
  • Partner with business units (e.g., Business Intelligence / Enterprise Analytics and application teams) to translate their data-handling needs into appropriate, workable protection policies.

• AI Enablement
• Design, build, and maintain an internal AI assistant/agent that lets employees self-serve answers to security-program questions — e.g., “How do I label this document?”, “Can I share this externally?”, “What’s our policy on personal cloud storage?” — grounded in our own policies, standards, and DLP/labeling guidance.
• Curate and maintain the knowledge base behind the agent (policies, FAQs, control documentation) so responses stay accurate as the program evolves, and establish guardrails so the agent declines or escalates questions it shouldn’t answer.
• Ap