Senior Security Engineer (Microsoft Purview)

The Information Technology (IT) team plays a key role in providing business enablement throughout ResMed. We are focused on application, infrastructure, and user productivity solutions, with innovation, efficiency and security. Our goal is providing customer oriented agile delivery, effective business partnership and state-of-the-art technology solutions.

A key role of the Senior Security Engineer is to design, implement, and maintain Microsoft 365 security and compliance solutions, including Microsoft Purview, Information Protection, and DLP. The position is accountable for safeguarding sensitive data, managing external collaboration controls, monitoring compliance posture, and continuously improving data protection policies to meet business and regulatory requirements.

Let’s talk about Responsibilities

• Designing, configuring, and maintaining Microsoft Purview and Information Protection policies.
• Implementing and tuning DLP rules to prevent unauthorized data sharing.
• Enforcing and validating security baselines across Microsoft 365 collaboration services.
• Managing external collaboration and third-party data access controls.
• Monitoring compliance posture and producing actionable insights.
• Supporting audit and regulatory requirements through evidence gathering and reporting.
• Collaborating with IT, Legal, Risk and Security teams to ensure data protection end to end.
• Maintaining awareness of emerging Microsoft 365 compliance features and threats.
• Participate in incident response, investigations and post-incident data protection reviews.

Core Technical Expertise

• Microsoft 365 Security and Compliance Stack
• Hands-on experience in designing, tuning, and implementing MIP policies, including sensitivity labels, rights management, and encryption controls.
• Proven experience developing and refining DLP policies across Exchange Online, SharePoint, OneDrive, Teams, and endpoint devices.
• Deep practical knowledge of Microsoft Purview features including Data Lifecycle Management, Insider Risk Management, Information Governance, eDiscovery, and Audit.
• Strong working knowledge of external data access management and third-party collaboration controls within Microsoft 365.
• Understanding of Microsoft Entra (Azure AD) governance and conditional access integrations.
• Data Security and Compliance Frameworks
• Ability to align Purview and MIP controls with frameworks such as ISO 27001, NIST 800-53, GDPR, HIPAA, CIS and the Australian Privacy Act.
• Experience in developing data classification, retention, and protection policies aligned to data governance, lifecycle management and compliance policies.
• Automation and Integration
• Experience using PowerShell and Graph API for automation, policy deployment, and reporting.
• Knowledge of SIEM integration for monitoring and incident correlation.
• Design and automate security and compliance process where possible.

Experience and Background

• Minimum 3–5 years’ experience in enterprise Microsoft 365 environments with a focus on security, compliance, and information protection.
• Demonstrated success in designing, implementing, and maintaining MIP policies, sensitivity labeling, and rights management solutions.
• Hands-on experience managing external sharing, guest access, and third-party collaboration controls.
• Exposure to compliance operations, incident management, or data governance.
• Experience working in regulated or high-assurance environments such as healthcare, finance, or public sector.

Certifications:

• SC-401: Administering Information Security in Microsoft 365
• SC-200: Microsoft Security Operations Analyst
• SC-900: Microsoft Security, Compliance, and Identity Fundamentals
• Bonus: CISSP, CCSP or Security+

Soft Skills and Attributes

• Strong analytical ability to translate compliance and business requirements into technical policy enforcement.
• Effective communication and documentation skills with both technical and non-technical stakeholders.
• Proven collaboration with cross-functional global teams including IT, Legal, Risk, and Security Operations.
• High attention to detail with a proactive and continuous improvement mindset.
• Commitment to staying current with Microsoft 365 roadmap developments and evolving data protection standards.

Let’s talk about Qualifications and Experience

Preferred:

• Bachelor’s degree.
• Minimum of 8 years of related experience.
• Applies functional knowledge and existing methodologies to solve complex problems or execute specialized projects.
• Exercises judgment in selecting methods, techniques and evaluation criteria for obtaining results.
• Determines methods and procedures on new assignments.

Joining us is more than saying “yes” to making the world a healthier place. It’s discovering a career that’s challenging, supportive and inspiring. Where a culture driven by excellence helps you not only meet your goals, but also create new ones. We focus on creating a diverse and inclusive culture, encouraging individual expression in the workplace and thrive on the innovative ideas this generates. If this sounds like the workplace for you, apply now! We commit to respond to every applicant.