Job Description
Reporting to the Enterprise Data Management function, the AI Governance & Information Protection Specialist supports the governance, risk oversight, operational readiness, and continuous improvement of an organization's Microsoft 365 Copilot and enterprise AI initiatives.
This role works across Data Protection, Digital Workplace, Data & Analytics, Security, Privacy, Legal, Risk, Data Governance, Service Desk, and business teams to help ensure AI technologies are adopted effectively, governed appropriately, monitored consistently, and extended safely through AI agents, connectors, low-code development platforms, and related AI capabilities.
The role also provides practical support for Microsoft Purview reviews across Data Loss Prevention (DLP), Data Security Posture Management (DSPM), Information Rights Management (IRM), and Communication Compliance, including sensitive data exposure, oversharing risk, AI activity insights, and remediation planning.
Responsibilities
- Champion and adhere to organizational safety, security, and compliance standards
- Support governance and operational oversight related to Microsoft 365 Copilot and enterprise AI technologies, including policy alignment, usage monitoring, risk management, readiness reviews, and stakeholder engagement
- Collaborate with Security, Privacy, Legal, Risk, and business teams to monitor AI-related data exposure risks and coordinate review or remediation activities
- Conduct reviews within Microsoft Purview to address confidential data exposure, oversharing risks, AI activity insights, risky interactions, unlabeled sensitive content, and policy gaps
- Review and recommend improvements to sensitivity labels, DLP policies, retention policies, audit controls, Insider Risk Management, and Communication Compliance processes
- Analyze AI-related activity signals and translate findings into practical governance, risk, and operational recommendations
- Support readiness assessments for AI expansion initiatives, including AI agents, Copilot Studio solutions, new data integrations, and emerging AI capabilities
- Ensure information protection, access management, governance, and monitoring controls remain aligned with business requirements and organizational risk tolerance
- Support remediation planning associated with oversharing, inappropriate access, risky AI usage, and control weaknesses
- Maintain governance documentation, decision logs, operating procedures, action plans, and evidence of control review activities
- Partner with Digital Workplace, Data & Analytics, Security, Privacy, Legal, Risk, Data Governance, Service Desk, and business teams to support AI governance and operational processes
- Develop reporting and metrics related to AI adoption, information risk, policy compliance, remediation progress, and governance maturity
- Support the creation and maintenance of user guidance, FAQs, policy interpretation resources, training materials, and communications related to responsible AI usage
- Coordinate with external vendors, contractors, and internal delivery teams supporting AI governance, compliance, and readiness activities
Qualifications
- Bachelor's degree in Information Management, Computer Science, Business, Law, Risk Management, Cybersecurity, or a related field, or an equivalent combination of education and experience
- Experience in information governance, data protection, cybersecurity, compliance, digital workplace operations, technology governance, or AI governance
- Strong understanding of Microsoft Purview, including sensitivity labels, Data Loss Prevention, audit capabilities, eDiscovery, retention policies, information protection, Insider Risk Management, and Communication Compliance
- Experience supporting Microsoft 365 Copilot, enterprise AI programs, digital workplace technologies, or similar governance initiatives
- Working knowledge of Microsoft 365 technologies, including Teams, SharePoint, OneDrive, Exchange Online, Entra ID, and Microsoft 365 administration
- Understanding of data classification, access controls, oversharing risks, sensitive information management, least-privilege principles, and AI-related data exposure risks
- Experience reviewing Purview, DSPM, audit, or operational insights and supporting remediation efforts with technical and business stakeholders
- Experience documenting governance processes, operating procedures, risk assessments, control activities, and decision records
- Strong communication and stakeholder management skills with the ability to translate technical concepts into practical business guidance
- Ability to work independently within a matrixed, cross-functional environment with evolving priorities and technology requirements
Affinity Earn
Know someone who’s great for this, or any of our open roles? Earn up to $4,000/year for each successful referral through Affinity Earn. You can also earn up to $50,000 for helping us find new clients. Learn about our referral program at https://affinity-group.ca/earn/ or browse our jobs & follow us at https://www.linkedin.com/company/affinity-staffing/jobs/
About Affinity
Affinity Group is a technology and business consulting and services company. We believe in creating long term relationships between clients and consultants that foster a mutually beneficial partnership. Affinity is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All employment is decided on the basis of qualifications, merit and business need.
For more information on Affinity, please visit www.affinity-group.ca
Job Number: 14072
