We are looking for an experienced Insider Risk Management (IRM) Specialist / Business Analyst to support and optimise Microsoft Purview Insider Risk Management operations within an enterprise environment.
The role will focus on enhancing IRM policy configurations, fine-tuning detection thresholds, reducing alert noise, and establishing a structured Business-as-Usual (BAU) operating framework.
Key Responsibilities
IRM Policy Configuration & Threshold Tuning
- Review existing Microsoft Purview IRM policies, indicators, thresholds, and triggering conditions.
- Analyse high alert volumes and identify configuration gaps contributing to excessive alerts.
- Optimise policy conditions and thresholds to improve alert quality and detection effectiveness.
IRM BAU Process Establishment
- Define and establish end-to-end BAU processes for IRM operations.
- Develop structured workflows for policy management, configuration changes, monitoring, and ongoing optimisation.
- Document operational procedures and establish a sustainable BAU framework.
Alert Noise Reduction & Optimisation
- Analyse alert patterns and identify recurring false positives and unnecessary alerts.
- Implement configuration-level tuning to minimise alert noise and improve detection accuracy.
- Maintain visibility of genuine insider risk activities while reducing excessive alert generation.
Expected Outcomes
- Optimised IRM policy configurations and detection thresholds.
- Reduced alert volumes and false positives.
- Established and documented IRM BAU processes.
- Improved alert quality and overall operational efficiency.
What We're Looking For
- Hands-on experience with Microsoft Purview Insider Risk Management.
- Strong understanding of IRM policy configuration, indicators, thresholds, and alert management.
- Experience in alert analysis, noise reduction, and policy optimisation.
- Experience establishing BAU processes and operational workflows within enterprise environments.
- Strong analytical, problem-solving, and stakeholder management skills.
Interested or know someone who could be a excellent fit? Please reach out via direct message or share your CV.