Information Security Analyst II

The Information Security Systems Analyst is responsible for the day-to-day administration, operation, and continuous improvement of the organization’s Microsoft Purview platform, serving as the primary subject matter expert for data governance, data loss prevention (DLP), and information protection.

• Hands-on operational ownership of Microsoft Purview; manage the platform daily across core functional areas
• Information Protection & Data Classification: administer/maintain sensitivity labels, label policies, and auto-labeling; develop/refine pharmaceutical data classification taxonomies; tune auto-classification rules to minimize false positives
• Data Loss Prevention: build/maintain/tune DLP policies across Exchange, SharePoint, One Drive, Teams, and endpoints; investigate matches/alerts; document and upscale confirm incidents
• eDiscovery & Content Search: support legal holds and eDiscovery collections; work with Legal and HR to execute/export content searches with chain-of-custody
• Insider
  
  Risk Management:
  
  administer Purview Insider Risk policies; review alerts; coordinate with HR/Legal/Security; maintain confidentiality
• Audit & Reporting: generate/interpret audit logs and compliance reports; report on DLP incidents, label adoption, policy effectiveness, and compliance posture; identify trends and recommend adjustments
• Platform Administration & Health Monitoring: monitor Purview health/performance; apply changes/updates; manage connector integrations
• Maintain documentation; contribute to knowledge base; triage security alerts and escalation

• Bachelor’s degree in Information Security/IT/Computer Science or related field, or equivalent experience
• 3+ years in information security, IT compliance, or data governance
• Hands‑on experience administering Microsoft Purview (or Microsoft 365 Compliance Center), including at least two of: sensitivity labels, DLP, retention policies, eDiscovery, Insider Risk Management
• Experience in a regulated industry
• Strong analytical/problem‑solving; ability to investigate alerts and interpret audit logs
• Effective written/verbal communication with non‑technical stakeholders

• Microsoft certifications (e.g., SC-401)
• Experience with Microsoft Defender for Cloud Apps (MCAS) and integration with Purview
• Pharmaceutical/biotech/life sciences experience
• eDiscovery/legal hold workflow experience with Legal
• Exposure to SIEM/EDR/identity & access management

Pay ranges:
Wisconsin $85,000–$100,000;
California $95,000–$110,000. Candidates must have current, valid authorization to work in the country where the role is located.