SOC Analyst L2/L3 - Insider Risk Management

Overview

Support the global administration and continuous improvement of Microsoft Purview Insider Risk Management processes, including alert handling, investigations, governance, and reporting.

What you'll do

• Administer Microsoft Purview Insider Risk Management and related processes.
• Optimize IRM policies, indicators, thresholds, escalation paths, and documentation.
• Monitor, triage, and document IRM alerts and cases.
• Support investigations through evidence collection and technical log analysis.
• Coordinate IRM processes across Legal, Compliance, Human Resources, IT Security, and business stakeholders.
• Prepare metrics, reports, and status updates on alerts, cases, and process effectiveness.
• Drive testing, validation, change management, and user readiness for IRM updates.

What you'll need

• Experience with Microsoft Purview Insider Risk Management, Microsoft 365 compliance solutions, or comparable platforms.
• Knowledge of insider risk concepts, policy configuration, alert triage, case management, and escalation workflows.
• Knowledge of Microsoft 365 workloads including Exchange Online, Teams, SharePoint Online, OneDrive, Entra ID, and Microsoft Defender.
• Understanding of privacy-by-design, proportionality, responsible investigations, and confidentiality controls.
• Strong analytical, problem-solving, documentation, and process-discipline skills.
• Ability to coordinate global stakeholders in time-critical situations.
• Effective written and spoken English communication.

Nice to have

• Familiarity with eDiscovery or digital forensic processes.

Details

• Remote work in Spain.
• Permanent contract.
• Full-time employment.