Information Protection & Security Operations Engineer Lisbon, Portugal

UNIT4 NV; Lisboa; Hybrid; EUR 50,000 - 80,000; Full time

Job summary

UNIT4 NV is hiring for an Information Protection & Security Operations Engineer in a hybrid role, split about 50/50 between information protection and security operations. You will manage Purview DLP policies and Insider Risk templates, drive data protection standards, and coordinate with HR, Legal and Compliance.

In parallel, you’ll deploy and tune Defender XDR/Sentinel, respond to incidents, and lead vulnerability remediation and guard against data loss across the IT estate.

Qualifications

• Experience in information protection and security operations.
• Practical knowledge of DLP, Insider Risk Management and data protection policies.
• Familiarity with Microsoft Purview controls and cloud security tools.
• Ability to design and implement protection standards and runbooks.
• Strong collaboration with HR, Legal and Compliance teams.

Responsibilities

• Information Protection: maintain and tune Purview DLP across Microsoft 365 apps and endpoints.
• Security Operations: deploy, configure and monitor Defender XDR and Sentinel to detect incidents.
• Respond to incidents, investigate policy matches and coordinate remediation.
• Develop and document information protection standards, and support audits (ISO 27001, SOC 2, GDPR, NIS2).
• Build detection rules, automation and playbooks to improve response times.

Skills

Information protection

Security operations

DLP

Insider risk

Policy design

Incident response

Security governance

Risk assessment

Threat detection

Compliance (GDPR, ISO27001, SOC2, NIS2

Tools

Microsoft Purview

Microsoft Defender XDR

Microsoft Sentinel

Defender for Cloud Apps

Exchange

SharePoint

OneDrive

Teams

Endpoints

Job description

The Information Protection & Security Operations Engineer is a hybrid role split roughly 50/50 between two disciplines. Half of your time is spent on information protection: managing and improving Microsoft Purview controls such as Data Loss Prevention (DLP), Insider Risk Management and related data protection policies, so that our customers' and our own sensitive data is protected without getting in the way of how people work. The other half is spent in Security Operations: deploying, configuring, monitoring and maintaining our security solutions, responding to incidents and ensuring vulnerabilities are identified and addressed. You will work closely with our IT colleagues to ensure that security and data protection are integrated into all aspects of the organization's infrastructure and act as guardians of the IT estate and of our data.

The responsibilities of the Information Protection & Security Operations Engineer include:

Information Protection (approx. 50%)

• Maintaining, Designing, deploying and tuning Microsoft Purview Data Loss Prevention (DLP) policies across Exchange, SharePoint, OneDrive, Teams, endpoints and cloud apps
• Configuring and operating Insider Risk Management, including policy templates, indicators, Adaptive Protection and case triage, in close collaboration with HR, Legal and Compliance
• Implementing and maintaining information classification, including sensitivity labels, label policies, auto-labeling and encryption
• Managing related protection policies such as retention and records management, communication compliance and Defender for Cloud Apps session and access policies
• Monitoring DLP and Insider Risk alerts, investigating policy matches, reducing false positives and reporting on policy effectiveness and data protection posture
• Defining and documenting information protection standards, processes and runbooks, and supporting audits and compliance requirements (e.g. ISO 27001, SOC 2, GDPR, NIS2)
• Driving user awareness and adoption, including policy tips, guidance and training for business teams

Security Operations (approx. 50%)

• Deploying and configuring security solutions such as intrusion detection systems, and endpoint protection
• Monitoring security systems to identify and respond to security incidents, including triage of alerts in Microsoft Defender XDR and Microsoft Sentinel
• Investigating security incidents and developing remediation plans
• Conducting vulnerability assessments and coordinating remediation of findings with infrastructure and application teams
• Developing and implementing security policies and procedures
• Building and improving detection rules, automation and playbooks to reduce response times
• Providing technical guidance and support to other IT professionals