Data Security and Governance Analyst Services

The agency is seeking a vendor to provide data security and governance analyst services to secure and manage its information assets. The selected analyst will design and implement Microsoft Purview Information Protection policies to classify and label data as public, confidential, or restricted. Additionally, the agency requires the establishment and maintenance of sensitivity labels, retention policies, and data classification schemas for Copilot and broader Microsoft 365 use. The scope of work includes monitoring data access patterns, managing data access controls, and investigating anomalies using Purview Audit and Microsoft Defender for Cloud Apps. The analyst must implement data loss prevention policies to prevent the internal and external oversharing of sensitive information. The agency also requires the vendor to manage compliance portals, configure Microsoft Purview roles and permissions, coordinate with security teams for ongoing audits, and implement processes to ensure data accuracy, completeness, and consistency. Bidders must perform all work onsite and must be located onshore within the United States. The agency accepts digital response submissions via email or online portal. The agency has not disclosed a set budget and is looking for proposals to determine the cost of the services.