Demonstrates expertise in gathering and documenting business requirements related to data classification and information protection, with a strong focus on compliance and stakeholder collaboration. Proficient in developing test scenarios and KPIs to measure adoption and effectiveness in regulated environments.

Highest-signal resume keywords

Business AnalysisData Classification PoliciesUser Acceptance Testing (UAT)Microsoft Purview Sensitivity LabelsKPI Definition and Reporting

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Gather, analyze and document business requirements related to data classification, information protection and secure collaboration
Translate data classification policies into business requirements for sensitivity labels, encryption, sharing permissions and Data Loss Prevention (DLP) controls
Define and document processes for classifying and labelling files, documents and SharePoint sites
Collaborate with stakeholders and key users to identify sensitive information, high-risk content and compliance gaps
Identify and document scenarios and exceptions involving external collaboration, partner access, mobile devices and Microsoft Copilot
Develop test scenarios and test cases for proof-of-concept activities
Coordinate User Acceptance Testing (UAT) and consolidate findings for implementation decisions
Define KPIs measuring adoption, compliance and technical effectiveness, including reporting requirements and data sources
Collaborate with technical teams, cybersecurity specialists and information governance stakeholders to align business requirements with technical solutions
Support change management and user adoption through training materials, user guides, FAQs and stakeholder communications

Requirements

What you’ll need

4+ years of experience as a Business Analyst, including projects related to compliance, information governance or data protection
Proven involvement in at least one Microsoft 365 information protection or secure collaboration project
Good working knowledge of Microsoft Purview sensitivity labels and Data Loss Prevention (DLP) from a business and process perspective
Experience translating data classification, information governance or data protection policies, such as GDPR or GxP, into practical business processes and controls
Strong experience gathering and documenting business requirements, designing processes and facilitating stakeholder workshops
Experience developing test scenarios, writing test cases and coordinating User Acceptance Testing (UAT)
Ability to define KPIs and reporting requirements using tools such as Excel, Power BI or monday.com
Experience working in regulated industries, preferably pharmaceuticals, life sciences or similar environments
Excellent communication, documentation and stakeholder management skills
Fluency in English
Valid criminal record extract, not older than three months, required
Microsoft SC-401 or previous SC-400 certification (nice to have)
Experience with change management methodologies such as Prosci (nice to have)
Familiarity with monday.com or similar project management and reporting platforms (nice to have)

Benefits

Comp & perks

Broad range of tasks and responsibilities
Friendly and international working environment
Professional development opportunities
Referral program (“Fishing for Friends”)
Company-sponsored events

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Business Requirements GatheringProcess DesignTest Scenario DevelopmentData Loss Prevention (DLP)Information GovernanceGDPR ComplianceGxP ComplianceStakeholder WorkshopsChange ManagementDocumentation

Soft Skills

Excellent CommunicationStakeholder Management

Tools & Technologies

Microsoft 365ExcelPower BIMonday.comMicrosoft Copilot

Certifications & Qualifications

Microsoft SC-401Microsoft SC-400

Industry Keywords

Regulated IndustriesPharmaceuticalsLife SciencesInformation ProtectionSecure Collaboration