Senior AI Security and Governance Consultant

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as Thrive’s technical subject matter expert regarding Microsoft Purview architecture, implementation, testing, and validation within AI Services.

• Evaluate client compliance, governance controls, data protection, and information protection needs from a technical security viewpoint.

• Design, configure, implement, and validate Microsoft Purview solutions encompassing Information Protection, Sensitivity Labels, DLP, Data Lifecycle Management, AI-DSPM, Records Management, eDiscovery, Communication Compliance, Insider Risk Management, and Compliance Manager.

• Lead workshops on Purview technical matters, conduct architecture reviews, plan implementations, and deliver technical findings presentations.

• Assess the technical security readiness for Microsoft 365 Copilot, Copilot Chat, Copilot Studio, ChatGPT, Claude, Snowflake Cortex, third-party AI platforms, AI agents, and emerging enterprise AI technologies.

• Execute AI security assessments, review technical governance control maturity, analyze data exposure, conduct privacy and compliance evaluations, perform AI risk assessments, assess vendor security, and provide policy/control recommendations.

• Oversee engagements validating Microsoft 365 security posture, data exposure, permissions, identity controls, and AI-related risks.

• Conduct tenant security assessments, SharePoint permissions evaluations, OneDrive data exposure analyses, Teams governance assessments, Entra ID security evaluations, Conditional Access reviews, sensitive data discovery, IAM assessments, external sharing evaluations, and security control gap analyses.

• Collaborate with Microsoft Advisory and client leadership on technical security, risk, privacy, and governance-control expertise to inform AI governance strategies and roadmaps.

• Serve as the primary architect for technical security and governance control during AI Services engagements.

• Facilitate workshops, conduct stakeholder interviews, present findings, and manage intricate client discussions with both executives and technical stakeholders.

• Work in conjunction with Microsoft Advisory, AI Governance, Cloud Security, SOC, AI Services, and Microsoft Engineering Services teams.

• Generate AI security and technical readiness assessments, Microsoft 365 AI security and data exposure findings, Purview assessments and implementation strategies, control reviews, data exposure reports, technical risk registers, policy recommendations, findings presentations, and remediation suggestions.

⛳️ Requirements

• A minimum of 5 years of experience in cybersecurity, governance, compliance, Microsoft Purview, or Microsoft security consulting.

• Proven experience leading customer-facing technical security, compliance, or implementation projects.

• Hands-on experience with Microsoft Purview assessments, architecture, configuration, implementation, testing, and validation.

• In-depth knowledge of Microsoft 365 security, compliance, identity, access, information protection, and data governance capabilities.

• Experience assessing identity, access management, permissions, data exposure, and AI-related security controls.

• Exceptional communication and presentation skills suitable for executive-level interactions.

• Capacity to translate technical findings into business-oriented risk, control, and remediation recommendations.

• Experience in creating technical assessment reports, control recommendations, implementation plans, and remediation strategies.

• Preferred: Microsoft Purview certifications.

• Preferred: Microsoft Security certifications.

• Preferred: Experience with Microsoft 365 Copilot implementations.

• Preferred: Experience with Microsoft Defender technologies.

• Preferred: Familiarity with AI governance frameworks and responsible AI principles.

• Preferred: Knowledge of the NIST AI Risk Management Framework (AI RMF).

• Preferred: Experience in regulated industries such as healthcare, financial services, and legal organizations.

• Preferred: Familiarity with ChatGPT Enterprise, Claude Business, Snowflake Cortex, and other enterprise AI platforms.

• Preferred: Experience in developing AI usage policies and governance standards.

🏝️ Benefits

• Comprehensive health, dental, and vision insurance.

• Competitive salary and performance-based bonuses.

• Opportunities for professional development and certifications.

• Flexible working hours and remote work options.

• Collaborative and innovative work environment.