M365 Security Analyst

Job Title: M365 Security Analyst

Location: Remote (within EU)

Day Rate: High

Duration: 6-12 months

A client of Alldus is seeking an experienced Microsoft 365 Security Analyst to support and strengthen governance, compliance, monitoring and oversight across their Microsoft 365 estate.

The Job:

• Microsoft Copilot adoption and usage monitoring
• AI Agent governance and oversight
• Data access, permissions and sharing analysis
• Microsoft Purview auditing and investigation
• Data Loss Prevention (DLP) investigations
• Security and compliance reporting
• Microsoft 365 governance and risk management

You'll work closely with security, compliance and business stakeholders to understand how data is being accessed and used across Microsoft 365, identify potential risks and support governance initiatives aligned to business and regulatory requirements.

Key Responsibilities

• Assess and report on Microsoft Copilot and AI Agent usage across the organisation
• Review what data Copilot and AI Agents can access and identify associated risks
• Analyse sharing permissions, data exposure and ownership of AI Agents
• Monitor adoption trends and usage metrics across Microsoft Copilot
• Investigate prompts and activity that trigger sensitive-data alerts
• Perform Microsoft Purview audit investigations across services including:
• Exchange Online
• SharePoint Online
• OneDrive
• Microsoft Teams
• Support Data Loss Prevention (DLP) investigations and compliance reviews
• Produce governance reports, risk assessments and stakeholder updates
• Work with security, compliance, legal and technology teams to improve Microsoft 365 governance controls

Essential Experience

• Strong Microsoft Purview experience, including audit searches and compliance investigations
• Experience reviewing Microsoft 365 activity logs and user activity across Exchange, SharePoint and OneDrive
• Data Loss Prevention (DLP) investigation and monitoring experience
• Microsoft Copilot governance experience, including monitoring, reporting or oversight activities
• Experience analysing data access, permissions, sharing models and ownership within Microsoft 365
• Strong stakeholder engagement and reporting skills
• Ability to translate technical findings into meaningful business and compliance risks

Note: There is no sponsorship provided for this contract role. All applicants must reside in the EU and have their own independent limited company.