About Astellas

Astellas is a global life sciences company committed to turning innovative science into VALUE for patients. We provide transformative therapies in disease areas that include oncology, ophthalmology, urology, immunology and women's health. Through our research and development programs, we are pioneering new healthcare solutions for diseases with high unmet medical need. Learn more at Astellas.com

Are you driven to make a real difference in the lives of patients?

We're seeking passionate individuals who thrive in dynamic environments, embrace recent ideas, and aren't afraid to take intelligent risks. People who act with unwavering integrity and are deeply committed to making a tangible impact.

Purpose and Scope:

Engineer and run the Microsoft Purview platform that protects Astellas' most sensitive data. As Data Security Engineering Lead, you will turn approved protection requirements into working sensitivity labels, data loss prevention and classification controls, keep them accurate as the business and its use of AI evolve, and lead the Astellas team that takes over day-to-day operations from our implementation partner.

Responsibilities and Accountabilities

- Scope: Microsoft Purview data security capabilities across Exchange Online, SharePoint Online, OneDrive, Teams, Windows endpoints, browsers, and Microsoft 365 Copilot and other AI tools, in a single global Microsoft 365 tenant.
- Information Protection: Design, configure and maintain sensitivity labels and label policies, container labels, client-side and service-side auto-labeling, and encryption (Rights Management and Message Encryption), keeping the label scheme simple enough for employees to apply correctly.
- Data Loss Prevention: Build and tune Purview DLP policies across email, collaboration,



endpoint (via Defender for Endpoint) and browser channels, and extend protection to Copilot and AI tools using Data Security Posture Management (DSPM) for AI. Configure policy tips, user notifications and business-justification overrides.
- Classification & Detection: Turn crown-jewel and use-case inputs from the Data Protection Policy & Engagement Lead into accurate detection, using custom sensitive information types, exact data match, document fingerprinting and trainable classifiers. Validate coverage with Content Explorer and Activity Explorer, and reduce false positives using feedback from the business and the Insider Risk team.
- Policy Lifecycle & Operations: Run policy change control from simulation to enforcement and rollback; triage and escalate DLP alerts; configure approved exceptions with expiry dates; and monitor user overrides, reporting patterns back to policy owners.
- Integration & Automation: Send Purview alerts and audit data to Microsoft Sentinel and ServiceNow with the Security Operations and platform teams; automate configuration, reporting and testing with Purview PowerShell and Microsoft Graph; and work with the Insider Risk team to share data loss and insider risk signals, align detections and Adaptive Protection, and use joint findings to tune policies.
- Service Ownership: Own service levels, performance metrics and the operations and engineering runbook; lead knowledge transfer from our implementation partner; and become the Astellas operations owner for the platform by mid-2027.
- Platform Leadership: Own the Microsoft Purview data security platform roadmap and provide input to licensing decisions; oversee our implementation partner's engineering delivery and quality; and lead and mentor the Astellas engineers and analysts who take over day-to-day operations.

📌 Data Security Engineering Lead (India)
🏢 Astellas
📍 India