Job Title: Insider Risk Management (IRM) Specialist
Location: Kuala Lumpur |
Experience: 810 Years
Summary
Seeking a seasoned professional with deep hands-on experience in Microsoft Purview Insider Risk Management (IRM) and strong data security expertise. The role focuses on designing insider risk policies, enhancing detection capabilities, and driving coordinated investigations across Security, HR, and Legal. The ideal candidate brings both technical mastery of Purview and practical understanding of insider threat behaviors.
Key Responsibilities
- Develop, customize, and manage Purview IRM policies and use cases, including monitoring high-risk activities and sensitive data interactions.
- Enable and optimize features such as Adaptive Protection, data connectors, and advanced analytics to improve insider risk visibility.
- Interpret IRM insights to support detailed investigations and collaborate with cross-functional stakeholders for case handling.
- Act as the SME for IRM configurationmanage detection groups, priority user lists, indicators, thresholds, and policy governance.
- Build and maintain templates for scenarios like departing employees, privileged/risky users, and security policy violations.
- Produce clear reports and insights for escalated cases, highlighting patterns, risks, and recommended controls.
Requirements
- 810 years of professional experience with strong hands-on expertise in Microsoft Purview IRM.
- Solid understanding of insider threat models, data protection controls, and user behavior analytics.
- Experience collaborating with security operations, HR, legal, and compliance teams.
- Strong analytical and problem-solving skills with the ability to translate risk signals into actionable outcomes.
