Microsoft Security & Purview Consultant

Jefferson Frank; Greater London; On-site; GBP 111,000 - 185,000; Full time

Job summary

Jefferson Frank is seeking an experienced Microsoft Security & Purview Consultant to lead a review and enhancement of Microsoft 365 security, compliance and data governance capabilities in London. This contract is outside IR35 and rolling for 3 months, with hybrid work and 2–3 days onsite.

You will optimise Defender alerting, design and implement Purview DLP policies, develop sensitivity labels and retention policies, and deliver GDPR-aligned governance documentation.

Qualifications

• Microsoft Defender suite coverage across Endpoint, O365, Identity, Cloud Apps.
• Microsoft Purview DLP, Information Protection, Records Management.
• Sensitivity labeling, Auto-Labelling, data classification.
• Retention labeling, policies, and data lifecycle management.
• Detection engineering, alert tuning, and MITRE ATT&CK mapping.
• Microsoft 365 Security & Compliance architecture knowledge.
• Strong GDPR and data governance understanding.
• Experience delivering security/compliance projects in enterprise M365.
• Excellent stakeholder management and documentation skills.

Responsibilities

• Review and optimise Defender alerting, monitoring, and detection coverage.
• Conduct gap analysis against security best practices and MITRE ATT&CK.
• Design and implement Purview DLP policies across M365 workloads.
• Develop sensitivity labels, classification frameworks, and information protection controls.
• Deliver GDPR-aligned retention policies and lifecycle management within Purview.
• Produce remediation roadmaps, runbooks, and governance documentation.

Skills

Defender suite

Purview DLP

Sensitivity labels

Data classification

Retention policies

MITRE ATT&CK mapping

GDPR knowledge

M365 security architecture

Stakeholder management

Documentation skills

Job description

Contract - outside IR35 (3 months rolling) London/Hybrid (2-3 days onsite)

We're seeking an experienced Microsoft Security & Purview Consultant to lead a review and enhancement of Microsoft 365 security, compliance and data governance capabilities.

Key Responsibilities

• Review and optimise Microsoft Defender alerting, monitoring, and detection coverage.
• Conduct gap analysis against security best practices and MITRE ATT&CK.
• Design and implement Microsoft Purview DLP policies across M365 workloads.
• Develop sensitivity labels, classification frameworks, and information protection controls.
• Deliver GDPR-aligned retention policies and lifecycle management within Purview.
• Produce remediation roadmaps, operational runbooks, and governance documentation.

Required Skills & Experience

• Microsoft Defender suite (Endpoint, Office 365, Identity, Cloud Apps).
• Microsoft Purview, including DLP, Information Protection, and Records Management.
• Sensitivity Labels, Auto-Labelling, and Data Classification.
• Retention Labels, Retention Policies, and Data Lifecycle Management.
• Detection engineering, alert tuning, incident management, and MITRE ATT&CK mapping.
• Microsoft 365 Security & Compliance architecture.
• Strong understanding of GDPR and data governance principles.
• Experience delivering security and compliance projects in enterprise M365 environments.
• Excellent stakeholder management and documentation skills.