Purview IR & DLP Response Engineer II

westernalliancebank; Phoenix (AZ); On-site; USD 90,000 - 130,000; Full time

Job summary

Western Alliance Bank is seeking an IR Engineer II - DLP Response Engineer focused on Microsoft Purview. You will administer Insider Risk and DLP policies, triage alerts, and support investigations in a regulated banking environment.

You will tune controls, validate policy performance, and collaborate with IT, HR, Legal, and Vendor Management to balance risk reduction with business productivity. The role also covers testing, documentation, and operational runbooks for Purview workflows.

Qualifications

• Hands-on administration of Purview Insider Risk and DLP controls.
• Experience in alert triage, investigation support, and policy tuning.
• Ability to document, design SOPs, and coordinate with cross‑functional teams.

Responsibilities

• Administer Purview Insider Risk and DLP controls across policies and labels.
• Triages alerts, investigates incidents, and improves policy fidelity.
• Supports AI governance with Purview configurations for Copilot and AI tools.
• Maintains runbooks, SOPs, and training materials for Purview workflows.
• Collaborates with IT, HR, Legal, Vendor Management, and stakeholders.
• Tests new or modified Purview policies prior to deployment.
• Monitors feature updates and recommends workflow improvements.

Skills

Purview

Insider Risk

Data Loss Prevention

Alert triage

Policy administration

Incident investigation

Compliance

Operational engineering

Tools

Microsoft Purview

DTEX Intercept

Microsoft 365 Copilot

Azure

Job description

Western Alliance Bank is seeking an IR Engineer II - DLP Response Engineer focused on Microsoft Purview. You will administer Insider Risk and DLP policies, triage alerts, and support investigations in a regulated banking environment.

You will tune controls, validate policy performance, and collaborate with IT, HR, Legal, and Vendor Management to balance risk reduction with business productivity. The role also covers testing, documentation, and operational runbooks for Purview workflows.