Information Protection & Security Operations Engineer

• Manage and improve Microsoft Purview controls, including Data Loss Prevention, Insider Risk Management and related data protection policies
• Design, deploy and tune Microsoft Purview DLP policies across Exchange, SharePoint, OneDrive, Teams, endpoints and cloud apps
• Configure and operate Insider Risk Management, including policy templates, indicators, Adaptive Protection and case triage
• Implement and maintain information classification, sensitivity labels, label policies, auto-labeling and encryption
• Manage retention and records management, communication compliance, and Defender for Cloud Apps session and access policies
• Monitor DLP and Insider Risk alerts, investigate policy matches, reduce false positives and report on policy effectiveness
• Define and document information protection standards, processes and runbooks
• Support audits and compliance requirements such as ISO 27001, SOC 2, GDPR and NIS2
• Drive user awareness and adoption through policy tips, guidance and training
• Deploy and configure security solutions such as intrusion detection systems and endpoint protection
• Monitor security systems and triage alerts in Microsoft Defender XDR and Microsoft Sentinel
• Investigate security incidents and develop remediation plans
• Conduct vulnerability assessments and coordinate remediation with infrastructure and application teams
• Develop and implement security policies and procedures
• Build and improve detection rules, automation and playbooks to reduce response times
• Provide technical guidance and support to other IT professionals
• Collaborate with IT, HR, Legal, Compliance, infrastructure and application teams

• Hands-on experience implementing and operating Microsoft Purview DLP and Insider Risk Management in a production environment
• Practical knowledge of sensitivity labels, information classification, encryption and retention concepts
• Understanding of data protection and privacy regulations and frameworks, including GDPR, ISO 27001 and NIS2
• Ability to balance security requirements with user productivity and work sensitively with HR, Legal and Compliance on insider risk topics
• Knowledge of firewalls, intrusion detection systems and endpoint protection
• Familiarity with networking and operating systems
• Understanding of security principles and best practices
• Experience with SIEM and XDR tooling, including KQL queries for investigation and detection
• Ability to work under pressure and respond quickly to security incidents
• Knowledge of current CVEs and emerging threats, with ability to track, assess and ensure coverage
• Analytical and problem-solving skills
• Effective communication and collaboration skills with non-technical stakeholders
• Discretion and sound judgement when handling confidential and sensitive information
• Bachelor's degree in computer science, information technology, information security or a related field is typically required
• Relevant certifications such as Microsoft SC-401, SC-200, AZ-500, CompTIA Security+ or CISSP may be beneficial
• Background checks/security clearance may be required for customer projects and access to sensitive customer data

• Flexible Leave Paid Time Off policy
• Remote working opportunities
• Global Wellbeing Days
• Growth opportunities, tools and guidance for professional development
• Talented colleagues, role models and mentors
• Sustainability initiatives including Environmental, Social, and Governance strategy and Act4Good programme
• Safe and inclusive working environment
• Employee Resource Groups open to all
• Equal opportunity commitment
• Potential security clearance/background check handled according to local privacy laws