Security and Compliance Advisor

The Security and Compliance Technical Advisor plays a critical role in ensuring robust information security and compliance within Microsoft 365 environments. This position requires extensive experience in cloud security, identity management, and regulatory compliance, with a focus on Microsoft security tools and frameworks. The advisor supports security assessments, governance reviews, and remediation planning to protect organizational data and maintain compliance with industry standards. Responsibilities:

• Implement and manage Microsoft 365 security and compliance solutions including Microsoft Defender, Purview, DLP, sensitivity labels, and information protection.
• Configure and monitor audit logging, Conditional Access policies, and privileged access management.
• Manage Entra ID identity and access management including administrative roles, application registrations, MFA, and access reviews.
• Support security assessments, compliance reviews, and governance assessments.
• Develop remediation plans and assist with evidence collection and documentation for compliance purposes.
• Collaborate with teams to ensure secure configuration and adherence to security policies.

• 7+ years of experience in information security, cloud security, identity, or compliance.
• At least 3 years of hands-on Microsoft 365 security and compliance experience.
• Proficiency with Microsoft Defender, Purview, DLP, sensitivity labels, audit/logging, Conditional Access, and privileged access.
• Experience with Entra ID identity and access management including MFA and secure configuration.
• Strong knowledge of security assessment, remediation planning, and compliance documentation.

• Microsoft Certified: Cybersecurity Architect Expert.
• Microsoft Certified: Security Operations Analyst Associate, Information Protection and Compliance Administrator Associate, or Identity and Access Administrator Associate.
• CISSP, CCSP, CISM, or equivalent recognized security certifications.
• Bachelor's degree in cybersecurity, information systems, computer science, or related field, or equivalent experience.
• Familiarity with NIST SP 800-53 control concepts and ARC-AMPE framework based on NIST SP 800-53 Revision 5.
• Experience working in regulated or public-sector environments.

• Must demonstrate dated experience with specific Microsoft 365 security technologies and responsibilities.
• Experience supporting regulated or public-sector compliance environments is preferred.

• Work schedule and shift pattern are not specified; flexibility may be required based on project needs.