Infrastructure Engineering Senior Manager - AI

About this role:

The Infrastructure Engineering Senior Manager — AI Governance & Compliance leads the design, implementation, and operational oversight of governance and compliance controls across the enterprise's Microsoft AI ecosystem. This role owns the control framework that ensures Microsoft 365, Microsoft 365 Copilot, Copilot Studio, Copilot Cowork, and other generative-AI solutions are deployed and operated in line with regulatory obligations, internal risk appetite, and data-protection standards. The manager bridges infrastructure engineering, security, privacy, legal, and risk functions to make AI adoption safe, auditable, and scalable.

In this role, you will:

• Define and maintain the AI governance operating model spanning M365 Copilot, Copilot Studio (custom agents/copilots), Copilot Cowork, and third-party/internal AI solutions.
• Establish guardrails, approval workflows, and risk-tiering for AI use cases, agent publishing, and grounding-data access.
• Translate evolving AI regulations (EU AI Act, NIST AI RMF, sector-specific banking/financial guidance) and internal policy into enforceable technical controls.

Microsoft Purview & Compliance Tooling

• Own configuration and lifecycle management of the Microsoft Purview suite as the primary compliance control plane:
  • Data Loss Prevention (DLP) — including Copilot-aware policies
  • Information Protection — sensitivity labels, encryption, and label-based access enforcement
  • Insider Risk Management
  • Communication Compliance
  • Audit (Standard/Premium) and unified audit logging for Copilot interactions
  • Compliance Manager — assessments, improvement actions, and control scoring
• Implement and operate Data Security Posture Management (DSPM) for AI to monitor AI/Copilot usage, risky prompts, oversharing, and sensitive-data exposure.
• Manage adjacent compliance tooling: Microsoft Defender for Cloud Apps, Entra ID Conditional Access and entitlement/access reviews, SharePoint Advanced Management (restricted content discovery, access controls), and Microsoft Priva for privacy risk and subject-rights management.

Data Classification

• Design the enterprise sensitivity-label taxonomy and auto-classification model (trainable classifiers, exact data match, sensitive information types).
• Ensure classification drives Copilot grounding boundaries so AI responses respect least-privilege and need-to-know.
• Remediate oversharing and "data sprawl" that exposes content to Copilot semantic indexing.

Retention & Records Management

• Define and enforce retention and deletion policies and labels across M365 workloads, including Copilot prompts, responses, and agent transcripts.
• Govern records management, disposition review, and defensible deletion in alignment with legal and regulatory retention schedules.

eDiscovery & Legal Hold

• Operate Microsoft Purview eDiscovery (Premium) and legal hold processes, ensuring Copilot interactions and AI-generated content are discoverable, preservable, and exportable for litigation and regulatory requests.
• Partner with Legal on holds, custodian management, search, and review workflows.

Engineering & Operations

• Lead a team of infrastructure and compliance engineers; set technical direction, standards, and automation (PowerShell, Graph API, Microsoft Graph Data Connect, Sentinel/Logic Apps for control automation).
• Build monitoring, alerting, and reporting dashboards for AI governance KPIs and audit readiness.
• Drive incident response for AI/data compliance events and remediation.

Stakeholder Management

• Serve as the primary technical liaison to Risk, Privacy, Legal, Security, and Audit on all AI governance matters.
• Produce executive-level reporting on AI compliance posture, control effectiveness, and regulatory readiness.

Required Qualifications:

• 7+ years of Infrastructure Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 3+ years of management or leadership experience

Desired Qualifications:

• 8+ years in infrastructure/security engineering, with 3+ years in a leadership or management capacity.
• Deep, hands-on expertise with Mi