GRC e-Discovery and Risk Analyst

The company is seeking a GRC e-Discovery Specialist to support governance, risk, and compliance (GRC) operations by identifying, collecting, preserving, reviewing, and producing electronically stored information (ESI) for legal or regulatory matters using Microsoft Purview.

The key responsibilities of this role will be the day-to-day execution of governance and compliance workflows related to eDiscovery, data retention, and privacy. The role will ensure the company's audit readiness and eDiscovery risk tracking. In addition to these responsibilities, the role may be called upon to perform other GRC-related activities in the direction of the Manager, GRC. This position is well-suited for an early-to-mid-career professional (3+ years of experience) looking to grow into broader governance and compliance responsibilities.

• Support and administer, from a GRC perspective, Microsoft Purview (Compliance Portal), including eDiscovery, legal holds, retention policies, and content search.
• Manage litigation holds and the eDiscovery lifecycle for legal and regulatory matters.
• Partner with Legal, Risk, Privacy, enterprise Data Management and IT teams on discovery, audit, regulatory inquiries, compliance, and evidence collection
• Maintain and audit data retention schedules across Microsoft 365 and other collaboration platforms.
• Support data privacy operations, including DSARs under GDPR, CCPA, and related regulations.
• Support documentation, SOPs, and GRC governance workflows related to eDiscovery.
• Identify opportunities to improve or automate GRC processes related to eDiscovery.

• Hands-on experience supporting or administering Microsoft Purview (Compliance Portal)
• Working knowledge of the eDiscovery lifecycle, including litigation holds and ESI handling.
• Working knowledge of GRC best practices and various regulatory and best practice frameworks to include GDPR, TRAIGA and NIST CSF, NIST Privacy Framework and NIST Risk Management Framework (RMF)
• Experience with data retention, records management, and defensible deletion
• Familiarity with Microsoft 365 (SharePoint, Teams), Box, and other collaboration platforms
• Experience supporting control and risk assessments of data controls to include risk evaluation of Third Parties as it relates to their support of e-Discovery.
• Experience supporting audits, legal requests, risk assessments, or regulatory inquiries.
• Ability to document processes, procedures, and workflows clearly and accurately.

Core Competencies

• Strong analytical and problem-solving skills with attention to detail
• Ability to explain technical processes to non-technical stakeholders.
• Effective collaboration across Legal, Risk, Compliance, enterprise Data Management, IT, and business teams
• High integrity and commitment to confidentiality
• Adaptability in evolving regulatory and technological landscapes.
• Initiative and ownership in improving processes and policies.

• 3+ years of experience in eDiscovery, information governance, compliance operations, privacy operations, or a related field
• Hands-on experience supporting or administering Microsoft Purview

• Familiarity with regulatory and best practice frameworks GDPR, TRAIGA and NIST CSF, NIST Privacy Framework and NIST Risk Management Framework (RMF)
• Familiarity with GRC best practices (Controls Management, Risk Management, Policy Management, Third-Party Risk Management)

• Familiarity with the eDiscovery lifecycle and litigation holds.
• Experience with Microsoft 365 (SharePoint, Teams), Box, and similar platforms
• Strong documentation, organization, and cross-functional communication skills
• Ability to work independently while continuing to develop new skills.

• Certified E-Discovery Specialist (CEDS) or similar certification
• Exposure to governance, risk, or compliance programs and CRISC certification
• Experience supporting audits or regulatory requirements.

Reports to the Governance, Risk, and Compliance Manager and partners with Legal, Risk, Integration Managers, and Infrastructure teams.

DPR Construction is a forward-thinking, self-performing general contractor specializing in technically complex and sustainable projects for the advanced technology, life sciences, healthcare, higher education and commercial markets. Founded in 1990, DPR is a great story of entrepreneurial success as a private, employee-owned company that has grown into a multi-billion-dollar family of companies with offices around the world.

Working at DPR, you'll have the chance to try new things, explore unique paths and shape your future. Here, we build opportunity together—by harnessing our talents, enabling curiosity and pursuing our collective ambition to make the best ideas happen. We are proud to be recognized as a great place to work by our talented teammates and leading news organizations like U.S. News and World Report, Forbes, Fast Company and Newsweek.

Explore our open opportunities at www.dpr.com/careers.