| Location | Carmel, IN |
Position Overview:
The SharePoint Oversharing Mitigation Consultant will support remediation, governance, and ongoing monitoring of SharePoint site access and permissions across a Microsoft 365 environment. This senior-level consultant will assess existing SharePoint and Teams-connected sites, identify oversharing risks, strengthen privacy and sensitivity labeling practices, and help reduce unnecessary exposure of SharePoint, Teams, and OneDrive data, including access considerations related to Microsoft Copilot and enterprise search.
Responsibilities:
Review existing SharePoint teams/sites to identify oversharing risks and permission gaps.
Assess public versus private site criteria and recommend appropriate privacy settings.
Review access granted to Everyone Except External Users (EEEU) and other large groups.
Evaluate site privacy settings, sensitivity labels, unlabeled sites, and shared links.
Identify and help remediate broken permission inheritance and unnecessary unique permissions.
Support efforts to lock down overshared sites and address sites without clear ownership.
Help identify high-risk sites that may need to be excluded from Microsoft Copilot and search.
Support container-level sensitivity labeling strategy and default privacy settings.
Assist with implementation of oversharing-related Data Loss Prevention (DLP) policies as recommended.
Develop documentation outlining updates, governance standards, and SharePoint best practices.
Support automated quarterly or annual review processes for ongoing governance.
Create or enhance PowerShell scripts to gather site details, permissions, labeling, shared link, and access information.
Support reporting around site creation settings, permission history, and other available historical site details.
Help define notifications or reporting for newly created sites that do not follow best practices, including sites using EEEU permission levels.
Tools and Technologies:
SharePoint Online
Microsoft 365
Microsoft Teams
OneDrive
Microsoft Purview sensitivity labels
PowerShell
Data Loss Prevention (DLP) policies
Microsoft Copilot and enterprise search
Qualifications:
Senior-level experience with SharePoint Online administration and governance.
Strong experience managing SharePoint site permissions, unique permissions, and permission inheritance.
Experience with Microsoft Purview sensitivity labels, privacy settings, and container-level labeling strategies.
Experience securing SharePoint, Microsoft Teams, and OneDrive data in Microsoft 365.
Experience reviewing shared links and internal/external access.
PowerShell scripting experience for SharePoint and Microsoft 365 reporting and operational support.
Experience supporting DLP policies and oversharing mitigation.
Understanding of Microsoft Copilot and search access/exposure considerations.
Strong documentation, reporting, and operational governance skills.