Business Analyst - M365 Data Classification & Information Governance

D-ploy is a dynamic IT and Engineering Solutions company operating across the EMEA region, including Switzerland, Germany, Czech Republic, Austria, the UK, and the USA. We are committed to delivering reliable and efficient services to our clients through strong partnerships and a people-focused culture.

We are looking for an experienced Business Analyst to support a Microsoft 365 data classification and information protection initiative within an international, highly regulated environment.

This role is ideal for someone who combines strong business analysis skills with a solid understanding of information governance, data protection and Microsoft 365 collaboration tools.

You will work closely with business stakeholders, technical specialists and compliance teams to translate data protection policies into practical business processes, technical requirements and user-friendly solutions, ensuring that security measures are effectively implemented and adopted across the organization.

Key Responsibilities

• Gather, analyze and document business requirements related to data classification, information protection and secure collaboration.
• Translate data classification policies into clear business requirements for sensitivity labels, encryption, sharing permissions and Data Loss Prevention (DLP) controls.
• Define and document processes for classifying and labelling new and existing files, documents and SharePoint sites.
• Collaborate with business stakeholders and key users to identify sensitive information, high-risk content and potential compliance gaps.
• Identify and document business scenarios and exceptions involving external collaboration, partner access, mobile devices and Microsoft Copilot.
• Develop test scenarios and test cases for proof-of-concept activities, coordinate User Acceptance Testing (UAT) and consolidate findings to support implementation decisions.
• Define key performance indicators (KPIs) to measure adoption, compliance and technical effectiveness, including reporting requirements and data sources.
• Work closely with technical teams, cybersecurity specialists and information governance stakeholders to ensure alignment between business requirements and technical solutions.
• Support change management and user adoption initiatives by contributing to training materials, user guides, FAQs and stakeholder communications.

Requirements

What We're Looking For

• 4+ years of experience as a Business Analyst, including projects related to compliance, information governance or data protection.
• Proven involvement in at least one Microsoft 365 information protection or secure collaboration project.
• Good working knowledge of Microsoft Purview sensitivity labels and Data Loss Prevention (DLP) from a business and process perspective.
• Experience translating data classification, information governance or data protection policies, such as GDPR or GxP, into practical business processes and controls.
• Strong experience gathering and documenting business requirements, designing processes and facilitating stakeholder workshops.
• Experience developing test scenarios, writing test cases and coordinating User Acceptance Testing (UAT).
• Ability to define KPIs and reporting requirements using tools such as Excel, Power BI or monday.com.
• Experience working in regulated industries, preferably pharmaceuticals, life sciences or similar environments.
• Excellent communication, documentation and stakeholder management skills.
• Fluency in English.
• Valid criminal record extract, not older than three months, required.

Nice to Have

• Microsoft SC-401 or previous SC-400 certification.
• Experience with change management methodologies such as Prosci.
• Familiarity with monday.com or similar project management and reporting platforms.

Benefits

• Broad range of tasks and responsibilities 

• Friendly and international working environment 

• Professional development opportunities 

• Referral program (“Fishing for Friends”) 

• Company-sponsored events 

Is IT in your DNA?