Sr Subject Matter Expert (Support&Ops)

Job description

Key Responsibilities Insider Risk (IRM) Monitoring: Assist in reviewing anonymized alerts in the Microsoft Purview Insider Risk Management console - help identify patterns like \"Data Resignation\" (at-risk departing employees) or \"Data Leaks\" by correlating activity across Teams, SharePoint, and Endpoint. DLP Strategy & Policy: Help manage Data Loss Prevention (DLP) specifically for IRM and Data Protection offering Optimization of \"Auto-labeling\" policies that automatically encrypt documents containing PII, PHI, or Intellectual Property Alert Correlation: Use the Content Explorer to investigate what was shared and the Activity Explorer to understand how it was shared Create weekly \"Risk Snapshots\" for leadership, visualizing trends in sensitive data exfiltration attempts. Technical Qualifications Education: Degree in Cybersecurity, Behavioral Science, Data Analytics, or Information Systems and/or six years of hands on experience Analytical Logic: Strong ability to use Boolean logic and Regular Expressions (Regex) to define sensitive data types. Microsoft 365 Core: Comfortable navigating the M365 ecosystem (understanding how a file moves from OneDrive to an external USB or Personal Cloud). Discretion: High level of integrity; this role involves handling highly sensitive information regarding company risk and employee behavior. Key Responsibilities Key Responsibilities Insider Risk (IRM) Monitoring: Assist in reviewing anonymized alerts in the Microsoft Purview Insider Risk Management console - help identify patterns like \"Data Resignation\" (at-risk departing employees) or \"Data Leaks\" by correlating activity across Teams, SharePoint, and Endpoint. DLP Strategy & Policy: Help manage Data Loss Prevention (DLP) specifically for IRM and Data Protection offering Optimization of \"Auto-labeling\" policies that automatically encrypt documents containing PII, PHI, or Intellectual Property Alert Correlation: Use the Content Explorer to investigate what was shared and the Activity Explorer to understand how it was shared Create weekly \"Risk Snapshots\" for leadership, visualizing trends in sensitive data exfiltration attempts. Technical Qualifications Education: Degree in Cybersecurity, Behavioral Science, Data Analytics, or Information Systems and/or six years of hands on experience Analytical Logic: Strong ability to use Boolean logic and Regular Expressions (Regex) to define sensitive data types. Microsoft 365 Core: Comfortable navigating the M365 ecosystem (understanding how a file moves from OneDrive to an external USB or Personal Cloud). Discretion: High level of integrity; this role involves handling highly sensitive information regarding company risk and employee behavior. Skill Requirements Key Responsibilities Insider Risk (IRM) Monitoring: Assist in reviewing anonymized alerts in the Microsoft Purview Insider Risk Management console - help identify patterns like \"Data Resignation\" (at-risk departing employees) or \"Data Leaks\" by correlating activity across Teams, SharePoint, and Endpoint. DLP Strategy & Policy: Help manage Data Loss Prevention (DLP) specifically for IRM and Data Protection offering Optimization of \"Auto-labeling\" policies that automatically encrypt documents containing PII, PHI, or Intellectual Property Alert Correlation: Use the Content Explorer to investigate what was shared and the Activity Explorer to understand how it was shared Create weekly \"Risk Snapshots\" for leadership, visualizing trends in sensitive data exfiltration attempts. Technical Qualifications Education: Degree in Cybersecurity, Behavioral Science, Data Analytics, or Information Systems and/or six years of hands on experience Analytical Logic: Strong ability to use Boolean logic and Regular Expressions (Regex) to define sensitive data types. Microsoft 365 Core: Comfortable navigating the M365 ecosystem (understanding how a file moves from OneDrive to an external USB or Personal Cloud). Discretion: High level of integrity; this role involves handling highly sensitive information regarding company risk and employee behavior. Other Requirements Key Responsibilities Insider Risk (IRM) Monitoring: Assist in reviewing anonymized alerts in the Microsoft Purview Insider Risk Management console - help identify patterns like \"Data Resignation\" (at-risk departing employees) or \"Data Leaks\" by correlating activity across Teams, SharePoint, and Endpoint. DLP Strategy & Policy: Help manage Data Loss Prevention (DLP) specifically for IRM and Data Protection offering Optimization of \"Auto-labeling\" policies that automatically encrypt documents containing PII, PHI, or Intellectual Property Alert Correlation: Use the Content Explorer to investigate what was shared and the Activity Explorer to understand how it was shared Create weekly \"Risk Snapshots\" for leadership, visualizing trends in sensitive data exfiltration attempts. Technical Qualifications Education: Degree in Cybersecurity, Behavioral Science, Data Analytics, or Information Systems and/or six years of hands on experience Analytical Logic: Strong ability to use Boolean logic and Regular Expressions (Regex) to define sensitive data types. Microsoft 365 Core: Comfortable navigating the M365 ecosystem (understanding how a file moves from OneDrive to an external USB or Personal Cloud). Discretion: High level of integrity; this role involves handling highly sensitive information regarding company risk and employee behavior. Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 230,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2026 totaled $14.8 billion. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Please read more about cookies policy here. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Functional Cookies These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be im