Microsoft Security & Purview Consultant

Contract - outside IR35 (3 months rolling) London/Hybrid (2-3 days onsite)

We're seeking an experienced Microsoft Security & Purview Consultant to lead a review and enhancement of Microsoft 365 security, compliance and data governance capabilities.

Key Responsibilities
Review and optimise Microsoft Defender alerting, monitoring, and detection coverage.
Conduct gap analysis against security best practices and MITRE ATT&CK.
Design and implement Microsoft Purview DLP policies across M365 workloads.
Develop sensitivity labels, classification frameworks, and information protection controls.
Deliver GDPR-aligned retention policies and lifecycle management within Purview.
Produce remediation roadmaps, operational runbooks, and governance documentation.

Required Skills & Experience
Microsoft Defender suite (Endpoint, Office 365, Identity, Cloud Apps).
Microsoft Purview, including DLP, Information Protection, and Records Management.
Sensitivity Labels, Auto-Labelling, and Data Classification.
Retention Labels, Retention Policies, and Data Lifecycle Management.
Detection engineering, alert tuning, incident management, and MITRE ATT&CK mapping.
Microsoft 365 Security & Compliance architecture.
Strong understanding of GDPR and data governance principles.
Experience delivering security and compliance projects in enterprise M365 environments.
Excellent stakeholder management and documentation skills.