Microsoft Purview IRM / DLP Security Specialist

Key Responsibilities:

• Administer and manage the Microsoft Purview Insider Risk Management (IRM) platform, including policy creation, configuration and monitoring.
• Develop, implement, and maintain IRM policy templates for various risk scenarios (e.g., departing users, high-risk users and policy violations).
• Serve as the Subject Matter Expert (SME) for IRM configurations, including detection groups, priority user groups and policy indicators.
• Collaborate with cross-functional stakeholders (Security, HR, and Legal) to support investigations and manage insider risk cases.
• Analyze and provide actionable insights for escalated risk incidents and investigations.
• Design, develop, and maintain Splunk dashboards, alerts, and reports to support incident detection and response.
• Create and deliver interactive Power BI dashboards and reports to support business intelligence and decision-making.
• Integrate and analyze data from multiple sources, including Databricks, to generate meaningful insights and reporting.

Key Requirements:

• Proven hands-on experience with Microsoft Purview Insider Risk Management (IRM) (mandatory).
• Strong proficiency in Splunk and Power BI (mandatory).
• Experience in data analysis, dashboard development, and reporting.
• Knowledge of Databricks, SQL, and/or PySpark is an added advantage.
• Strong analytical and problem-solving skills with high attention to detail.
• Ability to collaborate effectively with cross-functional teams and stakeholders.
• Good communication skills, with the ability to translate technical findings into business insights.