Insider Risk Management Engineer (IRM)

Job Title: Insider Risk Management Engineer (Microsoft Purview) Role Summary Responsible for end-to-end implementation and operationalization of

Microsoft Insider Risk Management (Purview)

solutions to detect, investigate, and mitigate insider threats across the organization.

Key Responsibilities Lead

implementation lifecycle

of Microsoft Insider Risk Management: Requirements gathering & risk assessment Solution design & policy architecture Configuration & deployment Testing & tuning Go-live & hypercare support Configure Insider Risk policies (Data Leaks, Data Theft, Security Policy Violations, etc.) Integrate with: Microsoft Purview DLP Microsoft Defender Microsoft Sentinel (SIEM) HR data connectors Develop alert triage workflows and investigation procedures Reduce false positives through policy tuning and threshold optimization Create dashboards and reports for risk visibility Collaborate with SOC, HR, Legal, and Compliance teams Document architecture, SOPs, and governance processes

Required Skills 3–6 years in cybersecurity or data protection Hands-on experience with

Microsoft Purview Insider Risk Management Strong knowledge of: DLP & data classification Microsoft 365 security stack KQL & log analysis Understanding of insider threat frameworks (NIST, ISO) Experience in stakeholder coordination during security tool deployment