Technical Analyst - Insider Risk

About the role

Our client is seeking a Technical Analyst specializing in Insider Risk to join their Cyber Defence Operations team. You will work on monitoring, reviewing and maturing the data loss prevention and insider risk control portfolio across the enterprise.

Key responsibilities

• Monitor and review data loss incidents across multiple security systems, ensuring response within established SLAs.
• Partner with user management and business stakeholders to contain and mitigate data loss events.
• Escalate complex security cases to technical teams and document resolutions thoroughly.
• Collaborate with the global Insider Risk team to implement technical controls across enterprise tools.
• Identify policy fine‑tuning opportunities and build automated detection logic to reduce manual effort.
• Generate operational reports on control effectiveness, team capacity and efficiency improvements.

Required profile

• Experience working in a SOC or Incident Response environment with a focus on Data Loss Prevention (DLP) controls.
• Hands‑on experience with Microsoft Purview solutions, including policy implementation and fine‑tuning.
• Practical knowledge of enterprise security platforms such as SIEM, SOAR, proxies and DLP tools.
• Understanding of standard IT infrastructure principles and common data exfiltration methods.
• Ability to explain security threats, implement mitigations and produce capacity/efficiency reporting.
• Prior experience in the banking or financial services sector is highly desirable.

Required skills

• Microsoft Purview
• Data Loss Prevention (DLP)
• SIEM
• SOAR
• Proxies
• Proofpoint
• Zscaler