Microsoft Security & Purview Consultant

Contract - outside IR35 (3 months rolling) London/Hybrid (2-3 days onsite)

We're seeking an experienced Microsoft Security & Purview Consultant to lead a review and enhancement of Microsoft 365 security, compliance and data governance capabilities.

Key Responsibilities

• Review and optimise Microsoft Defender alerting, monitoring, and detection coverage.
• Conduct gap analysis against security best practices and MITRE ATT&CK.
• Design and implement Microsoft Purview DLP policies across M365 workloads.
• Develop sensitivity labels, classification frameworks, and information protection controls.
• Deliver GDPR-aligned retention policies and lifecycle management within Purview.
• Produce remediation roadmaps, operational runbooks, and governance documentation.

Required Skills & Experience

• Microsoft Defender suite (Endpoint, Office 365, Identity, Cloud Apps).
• Microsoft Purview, including DLP, Information Protection, and Records Management.
• Sensitivity Labels, Auto-Labelling, and Data Classification.
• Retention Labels, Retention Policies, and Data Lifecycle Management.
• Detection engineering, alert tuning, incident management, and MITRE ATT&CK mapping.
• Microsoft 365 Security & Compliance architecture.
• Strong understanding of GDPR and data governance principles.
• Experience delivering security and compliance projects in enterprise M365 environments.
• Excellent stakeholder management and documentation skills.