Contract - outside IR35 (3 months rolling) London/Hybrid (2-3 days onsite) We''re seeking an experienced Microsoft Security and Purview Consultant to lead a review and enhancement of Microsoft 365 security, compliance and data governance capabilities. Key ResponsibilitiesReview and optimise Microsoft Defender alerting, monitoring, and detection coverage.Conduct gap analysis against security best practices and MITRE ATTandCK.Design and implement Microsoft Purview DLP policies across M365 workloads.Develop sensitivity labels, classification frameworks, and information protection controls.Deliver GDPR-aligned retention policies and lifecycle management within Purview.Produce remediation roadmaps, operational runbooks, and governance documentation. Required Skills and ExperienceMicrosoft Defender suite (Endpoint, Office 365, Identity, Cloud Apps).Microsoft Purview, including DLP, Information Protection, and Records Management.Sensitivity Labels, Auto-Labelling, and Data Classification.Retention Labels, Retention Policies, and Data Lifecycle Management.Detection engineering, alert tuning, incident management, and MITRE ATTandCK mapping.Microsoft 365 Security and Compliance architecture.Strong understanding of GDPR and data governance principles.Experience delivering security and compliance projects in enterprise M365 environments.Excellent stakeholder management and documentation skills. ..... full job details .....