... Insider Risk Management, and eDiscovery. • Develop and enforce data governance policies to discover, classify, and protect sensitive data across Microsoft 365, Azure, on-premises infrastructure ...
... Insider Risk Management, and eDiscovery. • Develop and enforce data governance policies to discover, classify, and protect sensitive data across Microsoft 365, Azure, on-premises infrastructure ...
Experience with Microsoft Purview capabilities such as Information Barriers, Insider Risk Management, Communication Compliance, Compliance Manager, or Audit * Microsoft certification such as MS-102
Experience with Microsoft Purview capabilities such as Information Barriers, Insider Risk Management, Communication Compliance, Compliance Manager, or Audit * Microsoft certification such as MS-102
... office management and corporate security teams to formulate risk mitigation and security ... insider threat, and intelligence analysis programs. * Create comprehensive intelligence and travel ...
... office management and corporate security teams to formulate risk mitigation and security ... insider threat, and intelligence analysis programs. * Create comprehensive intelligence and travel ...
... office management and corporate security teams to formulate risk mitigation and security ... insider threat, and intelligence analysis programs. Create comprehensive intelligence and travel ...
... office management and corporate security teams to formulate risk mitigation and security ... insider threat, and intelligence analysis programs. Create comprehensive intelligence and travel ...
Data Analyst - GEOINT Technical SME
Saint Louis, MO · On-site +1
Data and Metrics Management:Capture, maintain, and accumulate statistics that show quantities and ... Experience supporting insider threat, risk scoring, or similar security-focused analytics programs.
Data Analyst - GEOINT Technical SME
Saint Louis, MO · On-site +1
Data and Metrics Management:Capture, maintain, and accumulate statistics that show quantities and ... Experience supporting insider threat, risk scoring, or similar security-focused analytics programs.
... insider threats. Support the sustainment of risk scoring tools and other data analysis ... Data and Metrics Management: Capture, maintain, and accumulate statistics that show quantities and ...
... insider threats. Support the sustainment of risk scoring tools and other data analysis ... Data and Metrics Management: Capture, maintain, and accumulate statistics that show quantities and ...
Legal Counsel
Kansas City, MO · On-site
$141K - $207K/yr
... risk; review, negotiate and draft agreements; participate in projects and process improvements ... Support insider trading compliance administration, including maintenance of blackout calendars ...
Legal Counsel
Kansas City, MO · On-site
$141K - $207K/yr
... risk; review, negotiate and draft agreements; participate in projects and process improvements ... Support insider trading compliance administration, including maintenance of blackout calendars ...
Legal Counsel
$141K - $207K/yr
... risk; review, negotiate and draft agreements; participate in projects and process improvements ... Support insider trading compliance administration, including maintenance of blackout calendars ...
Legal Counsel
$141K - $207K/yr
... risk; review, negotiate and draft agreements; participate in projects and process improvements ... Support insider trading compliance administration, including maintenance of blackout calendars ...
Case Processing Analyst - Continuous Vetting
Saint Louis, MO · On-site
$20.67/hr
Receive, review, document, and coordinate information which represents a potential risk to national ... Process case maintenance activities, including virtual case management, attachment and release ...
Case Processing Analyst - Continuous Vetting
Saint Louis, MO · On-site
$20.67/hr
Receive, review, document, and coordinate information which represents a potential risk to national ... Process case maintenance activities, including virtual case management, attachment and release ...
Senior Staff AI Builder
$250K - $350K/yr
... management, post-visit care, and more. Hear from our CEO, Guillaume de Zwirek, about why we are ... Insider. Applicants must be currently authorized and have the ability to provide proof of ...
Quick apply
Senior Staff AI Builder
$250K - $350K/yr
... management, post-visit care, and more. Hear from our CEO, Guillaume de Zwirek, about why we are ... Insider. Applicants must be currently authorized and have the ability to provide proof of ...
Senior Staff AI Builder
Kansas City, MO · On-site
$67K - $83K/yr
... management, post-visit care, and more. Hear from our CEO, Guillaume de Zwirek, about why we are ... Insider. Applicants must be currently authorized and have the ability to provide proof of ...
Senior Staff AI Builder
Kansas City, MO · On-site
$67K - $83K/yr
... management, post-visit care, and more. Hear from our CEO, Guillaume de Zwirek, about why we are ... Insider. Applicants must be currently authorized and have the ability to provide proof of ...
EVP, Associate General Counsel
California, MO · On-site
$260 - $320/hr
... insider trading and Regulation FD compliance * Advise on federal securities law requirements ... Manage outside counsel relationships for transaction, securities, and capital markets matters in ...
EVP, Associate General Counsel
California, MO · On-site
$260 - $320/hr
... insider trading and Regulation FD compliance * Advise on federal securities law requirements ... Manage outside counsel relationships for transaction, securities, and capital markets matters in ...
Insider Risk Manager information
What does an Insider Risk Manager do?
What are some common challenges faced by an Insider Risk Manager, and how can they be addressed?
What is the difference between Insider Risk Manager vs Data Loss Prevention Specialist?
| Aspect | Insider Risk Manager | Data Loss Prevention Specialist |
|---|---|---|
| Credentials | Security certifications (CISSP, CISM), risk management experience | Security certifications, technical knowledge of DLP tools |
| Work Environment | Corporate security teams, risk assessment settings | IT security teams, technical implementation roles |
| Industry Usage | Financial, healthcare, government sectors | Tech, finance, enterprise sectors |
| Primary Focus | Identifying and mitigating insider threats | Preventing data exfiltration and leaks |
The Insider Risk Manager focuses on detecting and managing risks posed by internal employees, while the Data Loss Prevention Specialist concentrates on technical measures to prevent data leaks. Both roles require security certifications and are vital in protecting organizational assets, but they differ in scope and daily responsibilities.
What are the key skills and qualifications needed to thrive as an Insider Risk Manager, and why are they important?
Full-time
Posted 24 days ago
Lockton rating
9.0
Based on 47 frontline employees who took The Breakroom Quiz
37th of 299 rated insurance
Job description
Lockton is seeking a dedicated Security Engineer specializing in Data Protection. This role is focused on leveraging the Microsoft Purview suite to safeguard our organization's most critical data assets across our hybrid environment. The ideal candidate will be a subject matter expert in designing, implementing, and managing data-centric security controls within Microsoft Purview and Azure.
Key Responsibilities:
• Design, implement, and manage a comprehensive data protection strategy utilizing the Microsoft Purview governance and compliance portal.
• Deploy and configure Microsoft Purview solutions, including Data Loss Prevention (DLP), Microsoft Information Protection (MIP) for data classification and sensitivity labeling, Insider Risk Management, and eDiscovery.
• Develop and enforce data governance policies to discover, classify, and protect sensitive data across Microsoft 365, Azure, on-premises infrastructure, and other SaaS applications.
• Create, tune, and monitor robust Data Loss Prevention (DLP) policies for endpoints, email, Microsoft Teams, and cloud applications to prevent data exfiltration.
• Collaborate with business, legal, and compliance teams to translate data protection requirements into technical policies and controls.
• Manage the configuration and lifecycle of sensitivity labels to ensure proper encryption, access control, and visual markings are applied to documents and emails.
• Serve as the subject matter expert for data-related security incidents, using Purview tools for investigation, forensics, and response.
• Monitor the effectiveness of data protection controls and provide regular reporting on compliance, risk posture, and policy enforcement to leadership.
• Stay current with the latest advancements and threats in the data protection landscape and the evolution of the Microsoft Purview platform.
• Actively coach and mentor other security and technology team members on data protection best practices.
• Participate in the security team's on-call rotation and be available to respond to critical data security incidents outside of regular business hours.
Requirements:
• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent work experience.
• Professional certification in Microsoft security, such as SC-400: Microsoft Information Protection Administrator, is strongly preferred. AZ-500 or other relevant certifications are a plus.
• Minimum of 5 years of experience in information security, with at least 3 years focused specifically on data protection, data governance, or information lifecycle management.
• Deep, hands-on experience with the Microsoft Purview suite (formerly Microsoft 365 Compliance Center), including DLP, MIP/AIP, Data Classification, and Insider Risk Management.
• Strong experience with the Microsoft Azure ecosystem and securing data within Azure services (Azure Storage, Azure SQL, etc.).
• Proficiency with scripting languages, particularly PowerShell, for automating security and compliance tasks.
• Strong understanding of data privacy regulations and compliance frameworks (e.g., GDPR, CCPA, HIPAA, ISO 27001).
• Excellent analytical and problem-solving skills with the ability to manage security incidents under pressure.
• Exceptional communication and collaboration skills, with the ability to effectively communicate complex technical concepts to both technical and non-technical audiences.
#LI-JM