Data Security Engineering Lead

Astellas is a global life sciences company committed to turning innovative science into VALUE for patients. We provide transformative therapies in disease areas that include oncology, ophthalmology, urology, immunology and women's health. Through our research and development programs, we are pioneering new healthcare solutions for diseases with high unmet medical need. Learn more at Astellas.com

We're seeking passionate individuals who thrive in dynamic environments, embrace new ideas, and aren't afraid to take intelligent risks. People who act with unwavering integrity and are deeply committed to making a tangible impact.

Engineer and run the Microsoft Purview platform that protects Astellas' most sensitive data. As Data Security Engineering Lead, you will turn approved protection requirements into working sensitivity labels, data loss prevention and classification controls, keep them accurate as the business and its use of AI evolve, and lead the Astellas team that takes over day-to-day operations from our implementation partner.

Responsibilities and Accountabilities:

• Scope: Microsoft Purview data security capabilities across Exchange Online, SharePoint Online, OneDrive, Teams, Windows endpoints, browsers, and Microsoft 365 Copilot and other AI tools, in a single global Microsoft 365 tenant.
• Information Protection: Design, configure and maintain sensitivity labels and label policies, container labels, client-side and service-side auto-labeling, and encryption (Rights Management and Message Encryption), keeping the label scheme simple enough for employees to apply correctly.
• Data Loss Prevention: Build and tune Purview DLP policies across email, collaboration, endpoint (via Defender for Endpoint) and browser channels, and extend protection to Copilot and AI tools using Data Security Posture Management (DSPM) for AI. Configure policy tips, user notifications and business-justification overrides.
• Classification & Detection: Turn crown-jewel and use-case inputs from the Data Protection Policy & Engagement Lead into accurate detection, using custom sensitive information types, exact data match, document fingerprinting and trainable classifiers. Validate coverage with Content Explorer and Activity Explorer, and reduce false positives using feedback from the business and the Insider Risk team.
• Policy Lifecycle & Operations: Run policy change control from simulation to enforcement and rollback; triage and escalate DLP alerts; configure approved exceptions with expiry dates; and monitor user overrides, reporting patterns back to policy owners.
• Integration & Automation: Send Purview alerts and audit data to Microsoft Sentinel and ServiceNow with the Security Operations and platform teams; automate configuration, reporting and testing with Purview PowerShell and Microsoft Graph; and work with the Insider Risk team to share data loss and insider risk signals, align detections and Adaptive Protection, and use joint findings to tune policies.
• Service Ownership: Own service levels, performance metrics and the operations and engineering runbook; lead knowledge transfer from our implementation partner; and become the Astellas operations owner for the platform by mid-2027.
• Platform Leadership: Own the Microsoft Purview data security platform roadmap and provide input to licensing decisions; oversee our implementation partner's engineering delivery and quality; and lead and mentor the Astellas engineers and analysts who take over day-to-day operations.

Required Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology or a related field.
• 10+ years in security engineering or operations, including 4+ years hands-on with Microsoft Purview data security (Information Protection, DLP and data classification) in a production Microsoft 365 environment.
• Experience leading cross-functional initiatives with global stakeholders and overseeing external partners or vendors, including leading or mentoring a team.
• Experience building custom sensitive information types and tuning DLP policies to reduce false positives at enterprise scale.
• Hands-on experience with Endpoint DLP and Microsoft Defender for Endpoint.
• PowerShell scripting, with working knowledge of KQL and Microsoft Graph.
• Ability to explain technical behavior clearly to non-technical stakeholders.

Preferred Qualifications:

• Experience with exact data match, document fingerprinting or trainable classifiers.
• Experience protecting Microsoft 365 Copilot and AI tools with DSPM for AI.
• Experience integrating Purview with Microsoft Sentinel, Defender XDR and ServiceNow.
• Experience with Zscaler CASB and Data Security products.
• Experience in pharmaceutical, life sciences or other regulated industries.
• Microsoft Certified: Information Security Administrator Associate (SC-401); SC-200 or SC-100 a plus.

At Astellas we recognize the importance of work/life balance, and we are proud to offer a hybrid working solution allowing time to connect with colleagues at the office with the flexibility to also work from home. We believe this will optimize the most productive work environment for all employees to succeed and deliver. Hybrid work from certain locations may be permitted in accordance with Astellas’ Responsible Flexibility

• Global collaboration: Become part of a connected global business of like-minded life science leaders, all dedicated to improving patients' lives worldwide.
• Real-world patient impact: Contribute to transformative therapies that reach patients around the world, knowing your work makes a difference every day.
• Relentless Innovation: Join a company at the forefront of scientific breakthroughs, where you'll have the opportunity to shape the future of healthcare.
• A Culture of Growth: Chart your own course within a supportive environment that values your contributions, champions your development, and empowers you to pursue your passions.

Values: Innovation, Integrity and Impact sit at the heart of what we do.

Behaviors: We come together as ‘One Astellas’, working with courage and a sense of urgency. We are outcome focused and consistently take accountability for our personal contribution.