Data Classification Product Manager

Data Classification Product Manager

This is a hybrid position. Candidates must be local to Rockville, MD

Summary:

The Data Classification Product Manager will lead the strategy, development, and enterprise-wide adoption of the County’s data classification framework. This role is critical to ensuring that data is appropriately labeled, protected, and governed in accordance with internal policy and regulatory compliance requirements.

As the product owner of this strategic capability, the product manager will partner with Compliance, Security, Legal, IT, and Business Units to define and drive implementation of data governance policies and enablement through tools such as Microsoft Purview and related M365 Compliance technologies.

Requirements:

• Bachelor’s degree in Information Governance, Business Administration, Cybersecurity, Information Systems, or a related field.
• Proven experience as a Product Manager or Product Owner in enterprise data governance or compliance-related initiatives.
• Experience as a Product Manager or Product Owner, demonstrating the ability to define product strategy, drive implementation, and deliver enterprise solutions that align with organizational goals.
• Experience leading enterprise data classification or governance initiatives, including: defining and championing the product vision, goals, and roadmap; leading the development of classification policies, label taxonomy, and operational standards; guiding the technical implementation of Microsoft Purview and M365 Information Protection solutions; and ensuring the configuration and maintenance of sensitivity labels, DLP policies, and retention labels in alignment with the product roadmap.
• Strong understanding of data classification, retention, and lifecycle management in a regulated enterprise environment.
• Familiarity with Microsoft Purview, M365 Compliance Center, Sensitivity Labels, DLP policies, and Information Protection capabilities.
• Experience collaborating with engineering and security teams on implementation. Working knowledge of data protection frameworks such as NIST, CJIS, CCPA, GDPR, HIPAA, and PCI-DSS.
• Ability to interpret regulatory requirements and translate them into technical and operation policy.
• Exceptional communication and facilitation skills; able to align diverse stakeholder group toward a common goal.
• Adept at managing competing priorities and driving cross-functional collaboration.
• Familiarity with broader Microsoft 365 security tools including Entra and Microsoft Defender.
• Experience reporting compliance or governance metrics using tools such as Power BI. Certifications such as PMP, CIPP, CIPT, or other data governance/security credentials.

Key Responsibilities:

Product Strategy & Ownership

• Define and champion the County’s enterprise data classification product vision, goals, and roadmap.
• Translate legal, regulatory, and business needs into actionable product features and priorities.
• Own and manage the product backlog, prioritizing enhancements and integrations that improve compliance and reduce risk.
• Serve as the primary liaison between stakeholder groups including Legal, IT, Security, Records Management, and business departments.

Governance & Framework Development

• Lead development of classification policies, label taxonomy, and operational standards for data protection (e.g., Confidential, Internal, Public).
• Establish governance structures to ensure sustained policy adoption and oversight.
• Collaborate with compliance stakeholders to maintain policy alignment with HIPAA, CJIS, PCI-DSS, GDPR, and other applicable standards.

Tool Integration & Delivery Oversight

• Guide technical implementation of Microsoft Purview and M365 Information Protection solutions in coordination with security and platform teams.
• Ensure that sensitivity labels, DLP policies, retention labels, and related features are configured and maintained in line with the product roadmap.
• Oversee reporting and analytics to measure adoption, compliance, and effectiveness of classification initiatives.

Change Management & Stakeholder Engagement

• Drive cross-departmental engagement to build awareness and foster adoption of classification practices.
• Assist with developing communication and training strategies to support change readiness and minimize resistance.
• Track adoption metrics and stakeholder feedback to iterate and improve the classification product experience.