L3 Microsoft Purview Support (Security)

AVANADE ASIA PTE LTD; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

AVANADE ASIA PTE LTD in Singapore seeks an experienced Purview specialist to provide L3 SME support for Information Protection, DLP, IRM, and data lifecycle management. You will guide go-live activities, review evidence, and deliver Hypercare for Purview issues.

Coordinate with compliance, SOC, IT security, and operations to validate issues and track remediation, offering advisory input and clear remediation options. Certifications such as SC-200/MD-102 are a plus.

Qualifications

• Hands-on knowledge of Purview labels, DLP, IRM, and retention policies.
• Ability to advise on signed-off Purview design and build guidance across Microsoft 365 locations.
• Experience coordinating with compliance, SOC, IT security, and operations teams.
• Strong ownership, advisory communication, and issue-management skills.
• Desirable Microsoft certifications: SC-200, MD-102, SC-900, AZ-500, SC-300, SC-401.

Responsibilities

• Provide L3 SME support for Purview activities aligned to Information Protection, DLP, Insider Risk Management, and Data Lifecycle Management.
• Advise on label publishing, DLP simulation/enforcement, IRM policy activation, retention policy deployment, and evidence review during go-live.
• Deliver Hypercare guidance for Purview issues, including DLP tuning and IRM alert triage.
• Review screenshots, policy status, validation outputs, logs, and configuration evidence from client teams.
• Advise on warranty issues attributable to signed-off Purview design or build guidance.
• Coordinate with compliance, SOC, IT security, and operations to validate issues and track remediation.
• Maintain issue logs, advisory notes, RAID updates, resolution summaries, and phase closure inputs.

Skills

Purview support

DLP policies

IRM scenarios

Lifecycle retention

Go-live support

Tools

Splunk

Sentinel

Job description

Key Responsibilities

• Provide L3 SME support for Microsoft Purview activities aligned to Information Protection, Data Loss Prevention, Insider Risk Management, and Data Lifecycle Management.
• Support go-live by advising on label publishing, DLP simulation or enforcement, IRM policy activation, retention policy deployment, and configuration evidence review.
• Provide Hypercare guidance for Purview issues, including DLP false positive or negative tuning, label policy behavior, IRM alert triage, retention behavior, and Sentinel or Splunk alert routing.
• Review screenshots, policy status, validation outputs, logs, and configuration evidence shared by client teams.
• Advise on warranty issues attributable to signed-off Purview design or build/configuration guidance.
• Coordinate with compliance, SOC, IT security, and operations stakeholders to validate issues, clarify remediation guidance, and track closure.
• Maintain issue logs, advisory notes, RAID updates, resolution summaries, and phase closure inputs.

Skill and experiences

• Min 5+ years supporting Microsoft Purview in large enterprise security or compliance environments.
• Hands-on knowledge of Purview Information Protection labels, DLP policies, Insider Risk Management scenarios, and Data Lifecycle Management retention policies.
• Ability to advise on signed-off Purview design and build guidance across Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams locations.
• Familiarity with Microsoft built-in Sensitive Information Types, SOC integration touchpoints, Sentinel or Splunk routing, and Purview issue tracking.
• Strong understanding of go-live, Hypercare, warranty support, stakeholder evidence review, and L3 escalation handling.
• Able to lead technical conversations with compliance, SOC, IT security, and operations stakeholders
• Experience working with client-facing delivery teams and coordinating with compliance, SOC, IT security, and operations teams is beneficial
• Strong ownership, clear advisory communication, structured issue management, and practical judgment when guiding configuration evidence review, remediation options, and support closure activities
• Desirable Microsoft certifications include SC-200, MD-102, SC-900, AZ-500, SC-300, SC-401.