Insider Risk Management Engineer; IRM

Position: Insider Risk Management Engineer (IRM)
Job Title:

Insider Risk Management Engineer (Microsoft Purview)
Role Summary
Responsible for end-to-end implementation and operationalization of  Microsoft Insider Risk Management (Purview)  solutions to detect, investigate, and mitigate insider threats across the organization.

Key Responsibilities
Lead  implementation lifecycle  of Microsoft Insider

Risk Management:

Requirements gathering & risk assessment
Solution design & policy architecture
Configuration & deployment
Testing & tuning
Go-live & hypercare support
Configure Insider Risk policies (Data Leaks, Data Theft, Security Policy Violations, etc.)
Integrate with:
Microsoft Purview DLP
Microsoft Defender
Microsoft Sentinel (SIEM)
HR data connectors
Develop alert triage workflows and investigation procedures
Reduce false positives through policy tuning and threshold optimization
Create dashboards and reports for risk visibility
Collaborate with SOC, HR, Legal, and Compliance teams
Document architecture, SOPs, and governance processes

Required Skills
3–6 years in cybersecurity or data protection
Hands-on experience with  Microsoft Purview Insider Risk Management
Strong knowledge of:
DLP & data classification
Microsoft 365 security stack
KQL & log analysis
Understanding of insider threat frameworks (NIST, ISO)
Experience in stakeholder coordination during security tool deployment