Microsoft Security & Purview Consultant

Nigel Frank; Greater London; On-site; GBP 120,000 - 166,000; Part time

Benefits offered by this job

Hybrid work arrangement

Job summary

Nigel Frank is seeking an experienced Microsoft Security & Purview Consultant to lead the review and enhancement of Microsoft 365 security, compliance and data governance capabilities.

The role focuses on improving Defender alerting, implementing Purview DLP and retention policies, and delivering GDPR-aligned governance across enterprise M365 environments. Hybrid London-based engagement with 2–3 days onsite per week.

Qualifications

• Experience with Defender alerting, monitoring, and detection tuning.
• Proven ability to map security controls to MITRE ATT&CK framework.
• Experience designing and implementing Purview DLP, labels, and retention policies.
• Strong understanding of GDPR and data governance principles.
• Excellent stakeholder management and governance documentation skills.

Responsibilities

• Review and optimise Defender alerting, monitoring, and detection coverage.
• Conduct gap analysis against security best practices and MITRE ATT&CK.
• Design and implement Purview DLP policies across M365 workloads.
• Develop sensitivity labels, classification frameworks, and information protection controls.
• Deliver GDPR-aligned retention policies and lifecycle management within Purview.
• Produce remediation roadmaps, operational runbooks, and governance documentation.

Skills

Microsoft Defender

Microsoft Purview

Data classification

GDPR compliance

Stakeholder management

Documentation

Security governance

Incident management

Tools

Microsoft Defender suite

Microsoft Purview

Job description

Contract - outside IR35 (3 months rolling) London/Hybrid (2-3 days onsite)

We're seeking an experienced Microsoft Security & Purview Consultant to lead a review and enhancement of Microsoft 365 security, compliance and data governance capabilities.

Key Responsibilities

• Review and optimise Microsoft Defender alerting, monitoring, and detection coverage.
• Conduct gap analysis against security best practices and MITRE ATT&CK.
• Design and implement Microsoft Purview DLP policies across M365 workloads.
• Develop sensitivity labels, classification frameworks, and information protection controls.
• Deliver GDPR-aligned retention policies and lifecycle management within Purview.
• Produce remediation roadmaps, operational runbooks, and governance documentation.

Required Skills & Experience

• Microsoft Defender suite (Endpoint, Office 365, Identity, Cloud Apps).
• Microsoft Purview, including DLP, Information Protection, and Records Management.
• Sensitivity Labels, Auto-Labelling, and Data Classification.
• Retention Labels, Retention Policies, and Data Lifecycle Management.
• Detection engineering, alert tuning, incident management, and MITRE ATT&CK mapping.
• Microsoft 365 Security & Compliance architecture.
• Strong understanding of GDPR and data governance principles.
• Experience delivering security and compliance projects in enterprise M365 environments.
• Excellent stakeholder management and documentation skills.