Priyanka Singh

• Advised client organizations on Microsoft Purview and Microsoft 365 environments, ensuring alignment with IT security policies and operational controls. • Supported Microsoft Purview DLP policies across Exchange Online, SharePoint, and OneDrive for protection of sensitive data. • Worked with Microsoft Intune and Microsoft 365 security configurations, ensuring secure device and data access management. • Assisted in data classification and sensitivity labelling using Microsoft Information Protection (MIP). • Collaborated with department managers, Legal, and Risk Management to support Privacy Impact Assessments (PIAs) for new services, evaluating data collection flows and recommending automated controls to mitigate privacy risks. • Assisted in data discovery and classification activities, identifying sensitive data and applying appropriate protection measures. • Investigated and responded to reported data spills and privacy breaches, coordinating immediate containment, root-cause analysis, and long-term breach remediation to ensure statutory compliance. • Contributed to documentation, procedures, and process improvements for DLP operations and compliance. • Advised teams on security standards, vulnerability trends, and control expectations to reduce business risk. • Maintained baseline awareness of the evolving AI threat landscape, including data exposure risks from Microsoft Copilot, generative AI leakage, and shadow AI.

Led change management for Microsoft Exchange, ensuring seamless updates, migrations, and policy changes. Managed and administered Exchange Server (on-prem & Exchange Online) for enterprise environments. Oversaw mailbox provisioning, user account management, and distribution group configurations. Configured and optimized mail flow rules, connectors, and spam filtering policies. Implemented Exchange Online Protection (EOP) and Defender for Office 365 for email security. Monitored and troubleshot email delivery, transport rules, and hybrid Exchange setups. Managed email retention, archiving, and compliance policies in line with regulatory requirements. Led disaster recovery planning and backup strategies for Exchange databases. Provided Level 3 support and incident resolution for escalated email and Exchange-related issues. Managed a team of 5 admins, providing technical leadership and training on Exchange best practices.

Led and mentored the Data Loss Prevention (DLP) Team and Patch Management Team, driving enterprise-wide risk reduction initiatives by engaging with stakeholders, Data Owners, BU Heads, and Department VPs to prioritize remediation based on asset- level risk impact and organizational risk appetite. § Specialized in Data Management and threat modeling, identifying high-risk exposures and implementing procedural and technological controls for timely mitigation in alignment with corporate strategy and IT security policies. § Designed, deployed, and fine-tuned DLP policies across Microsoft Purview (Microsoft Information Protection – MIP), Exchange Online, SharePoint, OneDrive for Business, Teams, and other SaaS platforms to safeguard sensitive data, including PII, SPII, financial data, and intellectual property. § Implemented and maintained data classification using Microsoft Purview and integrated classification tools, ensuring proper data labeling, retention, and compliance with regulatory frameworks. § Directed Vulnerability Assessments for newly published CVEs, collaborating with architects for policy, query, and group configuration documentation and continuous knowledge sharing. § Delivered comprehensive GRC reporting through Power BI, ServiceNow dashboards, and scheduled MBR (Monthly Business Reviews), QBR (Quarterly Business Reviews), and Board Statements, enabling data-driven decision-making. 2 § Managed endpoint protection, file integrity monitoring, data masking, and SaaS security solutions, ensuring enterprise-wide security posture improvement. § Oversaw access governance, backup and restore operations, archival processes, and developed complete security documentation including Playbooks, Runbooks, RACI matrices, and incident response guidelines. § Served as Scrum Master, Product Owner, and Data Owner in Agile SCRUM methodology, leading sprints for security control implementation. Experience with Application Security

Exchange and Application Support

Application Support