Cybersecurity - Insider Threat Engineer

About Us

WTW is a leading advisory, broking, and solutions company with a storied history dating back to 1828. From the Titanic in 1912 to supporting the Moon Buggy in 1971, we have a legacy of turning risk into growth opportunities. 

Our Lisbon Regional Delivery Hub is at the heart of this innovation, with a vibrant team of over 300 professionals dedicated to excellence every day.

The Opportunity

Are you passionate about cyber security? Do you want to help shape the future of Insider Threat and Data Loss Prevention (DLP) capabilities for a global leader? We have an exciting opportunity for an experienced and highly skilled Insider Threat Engineer to join our Cyber Defense team.

As an L2 Insider Threat Engineer, you’ll be part of a dynamic and culturally diverse team ensuring the smooth operation of our Insider Risk Management (IRM) and DLP platforms. You’ll report directly to the L3 Insider Threat Engineering Manager and play a key role in protecting WTW’s critical information assets across the globe.

This position is perfect for someone with a strong background in troubleshooting, administering, and implementing IRM and DLP technologies, particularly within the Microsoft Security stack, including Purview DLP, IRM, and Defender.

What You’ll Do

As our L2 Insider Threat Engineer, you will:

• Implement and Maintain Security Solutions: Ensure the effective operation, implementation, and troubleshooting of IRM and DLP technologies, policies, and rules across WTW.
• Collaborate with Experts: Work closely with the L3 Insider Threat Engineering Manager and cross-functional teams—IT, HR, Cyber Security, Legal, and Compliance—to define and refine policies that protect sensitive data.
• Drive Continuous Improvement: Fine-tune DLP and IRM rules to minimize false positives, while regularly assessing the Insider Threat Engineering function to identify areas for enhancement.
• Be the Go-To Expert: Serve as an escalation point for L1 Engineers, providing guidance and support as needed.
• Report on Progress: Contribute to regular management reports, offering insights on the performance and effectiveness of our IRM and DLP systems.
• Stay Ahead of the Curve: Keep up with the latest advancements in IRM and DLP technologies to ensure WTW remains at the forefront of cyber defense.

Additional Responsibilities

• Play a pivotal role in projects aimed at enhancing insider threat and data protection policies.
• Assist with other tasks as assigned by the Global Head of Insider Threat and the L3 Insider Threat Engineering Manager.