M365 Security – Governance Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the security workstream for the adoption of Microsoft 365 Copilot.

• Evaluate the readiness of the Microsoft 365 environment for Copilot implementations.

• Analyze risks related to data exposure, concerns about oversharing, and the permissions framework.

• Formulate recommendations for a secure deployment of Copilot.

• Create AI governance frameworks, guardrails, and usage policies.

• Specify monitoring and reporting requirements for Copilot activities and risk management.

• Review AI firewalls and conduct additional security tasks.

• Assess and optimize configurations within Microsoft Purview.

• Evaluate controls related to sensitivity labeling, data loss prevention (DLP), retention, and records management.

• Develop strategies for data protection concerning regulated and sensitive materials.

• Assist with security logging, auditing, and compliance reporting obligations.

• Propose enhancements to controls to minimize the risk of inappropriate content exposure.

• Establish governance roles and responsibilities pertaining to Copilot and AI initiatives.

• Develop processes for approvals, usage standards, and risk management protocols.

• Align AI security measures with organizational compliance requirements.

• Implement responsible AI practices and guidelines for prompt governance.

• Collaborate with stakeholders on policies regarding retention, content lifecycle, and information management.

• Assess governance and Conditional Access strategies for Microsoft Entra ID.

• Review compliance of devices and management controls within Intune.

• Evaluate considerations for BYOD and mobile access in relation to Copilot.

• Suggest improvements for identity protection and access control.

• Aid in the integration of security controls across Microsoft security platforms.

• Collaborate with the Security Operations and Incident Management teams.

• Analyze requirements for logging, auditing, and monitoring.

• Provide guidance on incorporating Copilot-related security events into existing security monitoring systems.

• Support the operationalization of new security controls and processes.

⛳️ Requirements

• A minimum of 7 years' experience in Microsoft Security, Compliance, or Governance consulting.

• Profound expertise in Microsoft Purview, Microsoft Entra ID, Microsoft Intune, Microsoft Defender Suite, Microsoft 365 Security & Compliance, and Microsoft 365 Copilot Governance.

• Comprehensive understanding of information protection, DLP, retention, records management, and AI governance.

• Experience in conducting security assessments and crafting remediation roadmaps.

• Excellent communication skills, capable of engaging directly with clients and cross-functional teams, and mentoring fellow developers.

• Previous experience in consulting, agency, or multi-client delivery settings is advantageous.

• Microsoft Security certifications (SC-100, SC-200, SC-300, SC-400) are beneficial.

• Background in AI governance and secure AI adoption initiatives.

• Knowledge of Microsoft SharePoint Advanced Management.

• Experience leading security workshops and discussions with executive stakeholders.

• Familiarity with enterprise security modernization programs and E5/E7 value realization initiatives.

• Proven track record of developing internal accelerators, frameworks, or reusable components that can scale across client engagements.

• Experience in regulated sectors (financial services, healthcare, legal) with a focus on security and compliance requirements.

🏝️ Benefits

• Flexible paid time off (PTO) and work schedule.

• Options for hybrid or fully remote work.

• Comprehensive insurance coverage and flexible spending accounts.

• 401(k) plan with company matching.

• Monthly stipend for remote work expenses.

• Ongoing training, certifications, and opportunities for professional growth.

• Regular cultural and social activities: volunteering, game nights, happy hours, team outings, and more.

• Active Employee Resource Groups (Parents, Pride, POC, Womxn).

• Mentorship and career development initiatives.