SOC Analyst L2/L3 - Insider Risk Management

About the role

Omega CRM Consulting is recruiting a SOC Analyst L2/L3 focused on Insider Risk Management, working remotely for a global pharmaceutical company. The role supports the global operation and administration of Microsoft Purview Insider Risk Management and related processes, in line with regulatory, data privacy and internal governance requirements.

Key responsibilities

• Support the global operation and administration of Microsoft Purview Insider Risk Management and related processes.
• Improve and optimise IRM policies and processes, including indicators, thresholds and escalation paths, and keep documentation up to date.
• Maintain confidentiality safeguards and ensure auditability of IRM activities and case information.
• Coordinate with Legal, Compliance, HR, IT Security and other stakeholders to align IRM processes with governance standards.
• Monitor, triage and document IRM alerts and cases, and support investigations, evidence collection and log-file analysis.
• Prepare recurring metrics, reports and status updates on alert trends, case volumes and process effectiveness.
• Drive testing, validation, change management and user readiness for new IRM policies and features.

Required profile

• Experience with Microsoft Purview Insider Risk Management, Microsoft 365 compliance solutions or comparable insider risk or data protection platforms.
• Understanding of insider risk concepts: risk indicators, policy configuration, alert triage, case management, escalation workflows and audit-ready documentation.
• Knowledge of Microsoft 365 workloads and signals (Exchange Online, Teams, SharePoint Online, OneDrive, Entra ID, Microsoft Defender, endpoint activity).
• Strong understanding of privacy-by-design, proportionality, responsible investigation and confidentiality controls such as least privilege and role-based access control.
• Discretion, strong judgment on sensitive employee matters, ability to coordinate across global teams and effective written and spoken English.
• Familiarity with eDiscovery or digital forensics is beneficial.

What we offer

• Permanent contract, full-time, remote in Spain.
• Flexible schedule and home office.
• Trainings and certifications with official certificates from main partners.
• Flexible remuneration (public transport ticket, meal voucher).
• Health insurance.