We are looking for an experienced Insider Risk Management (IRM) Specialist / Business Analyst to support and optimise Microsoft Purview Insider Risk Management operations within an enterprise environment.
The role will focus on enhancing IRM policy configurations, fine-tuning detection thresholds, reducing alert noise, and establishing a structured Business-as-Usual (BAU) operating framework.
Key Responsibilities
IRM Policy Configuration & Threshold Tuning
Review existing Microsoft Purview IRM policies, indicators, thresholds, and triggering conditions.
Analyse high alert volumes and identify configuration gaps contributing to excessive alerts.
Optimise policy conditions and thresholds to improve alert quality and detection effectiveness.
IRM BAU Process Establishment
Define and establish end-to-end BAU processes for IRM operations.
Develop structured workflows for policy management, configuration changes, monitoring, and ongoing optimisation.
Document operational procedures and establish a sustainable BAU framework.
Alert Noise Reduction & Optimisation
Analyse alert patterns and identify recurring false positives and unnecessary alerts.
Implement configuration-level tuning to minimise alert noise and improve detection accuracy.
Maintain visibility of genuine insider risk activities while reducing excessive alert generation.
Expected Outcomes
Optimised IRM policy configurations and detection thresholds.
Reduced alert volumes and false positives.
Established and documented IRM BAU processes.
Improved alert quality and overall operational efficiency.
What We're Looking For
Hands-on experience with Microsoft Purview Insider Risk Management.
Robust understanding of IRM policy configuration, indicators, thresholds, and alert management.
Experience in alert analysis, noise reduction, and policy optimisation.
Experience establishing BAU processes and operational workflows within enterprise environments.
Solid analytical, problem-solving, and stakeholder management skills.
Interested or know someone who could be a excellent fit? Please reach out via direct message or share your CV.
Hiring #MicrosoftPurview #InsiderRiskManagement #IRM #CyberSecurity #DataSecurity #BusinessAnalyst #BAUSupport #InformationProtection