M365 Security, Governance Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the security aspect of a Microsoft 365 Copilot adoption project

• Evaluate the readiness of the Microsoft 365 environment for Copilot installations

• Analyze data exposure risks, concerns regarding oversharing, and the status of permissions

• Create recommendations for the secure implementation of Copilot

• Develop AI governance frameworks, guidelines, and usage policies

• Specify monitoring and reporting requirements for Copilot operations and risk oversight

• Examine AI firewalls and other security-related tasks

• Assess and refine Microsoft Purview configurations

• Review sensitivity labeling, data loss prevention (DLP), retention, and records management controls

• Formulate data protection strategies for sensitive and regulated content

• Assist with security logging, auditing, and compliance reporting

• Outline governance roles, approval workflows, usage standards, and risk management protocols for Copilot and AI initiatives

• Ensure AI security measures are aligned with enterprise compliance standards

• Foster responsible AI practices and prompt governance guidelines

• Collaborate with stakeholders on retention, content lifecycle, and information management policies

• Assess Microsoft Entra ID governance and Conditional Access approaches

• Review device compliance and controls related to Intune management

• Evaluate considerations for BYOD and mobile access in relation to Copilot

• Suggest enhancements for identity protection and access controls

• Assist in integrating security measures across Microsoft security platforms

• Work alongside Security Operations and Incident Management teams

• Assess logging, auditing, and monitoring needs

• Provide guidance on incorporating Copilot-related security events into current monitoring systems

• Facilitate the operationalization of new security controls and processes

⛳️ Requirements

• Over 7 years of experience in Microsoft Security, Compliance, or Governance consulting

• Extensive knowledge of Microsoft Purview, Microsoft Entra ID, Microsoft Intune, Microsoft Defender Suite, and Microsoft 365 Security & Compliance

• Strong grasp of information protection, DLP, retention, records management, and AI governance

• Proven background in conducting security assessments and formulating remediation plans

• Excellent communication skills, capable of collaborating directly with clients and cross-functional teams, as well as mentoring other developers

• Previous experience in consulting, agency roles, or multi-client delivery settings is advantageous

• Microsoft Security certifications (SC-100, SC-200, SC-300, SC-400) are a significant asset

• Experience with AI governance and secure AI adoption initiatives

• Familiarity with Microsoft SharePoint Advanced Management

• Proven track record of leading security workshops and engaging with executive stakeholders

• Understanding of enterprise security modernization efforts and E5/E7 value realization initiatives

• History of developing internal accelerators, frameworks, or reusable components that can scale across client projects

• Background in regulated sectors (financial services, healthcare, legal) with a focus on security and compliance requirements

🏝️ Benefits

• Flexible paid time off (PTO) and work schedule

• Options for hybrid or fully remote work

• Comprehensive insurance plans and flexible spending accounts

• 401(k) plan with company matching

• Monthly stipend for work-from-home expenses

• Ongoing training, certifications, and professional development opportunities

• Regular cultural and social events: volunteering, game nights, happy hours, team outings, and more

• Active Employee Resource Groups (Parents, Pride, POC, Womxn)

• Mentorship and career development initiatives