Senior AI Security Consultant

Thrive

About The Position

Thrive is seeking a client-facing Senior AI Security Architect to help organizations adopt AI safely, securely, and responsibly through technically validated security, compliance, governance, and data-protection controls. The role is Thrive’s technical authority for AI security architecture, technical risk validation, Microsoft Purview implementation, and governance-control design within AI Services. It requires strong knowledge of Microsoft Purview, Microsoft 365 Copilot and Copilot Chat, Anthropic Claude, OpenAI ChatGPT, and other AI security and governance tools. The role works directly with clients and Thrive’s Microsoft Advisory team to assess technical AI security readiness, identify security and compliance risks, evaluate data exposure, design practical governance controls, and support architecture decisions. It leads technical security and control conversations while collaborating with Microsoft Advisory on Microsoft-focused strategy, Copilot and AI readiness, licensing and capability alignment, adoption, optimization, governance operating models, and executive roadmaps. As part of the AI Services organization, this position collaborates with Microsoft Advisory, the AI Governance team, Security Operations, Cloud Security, Microsoft Engineering Services, and other technical teams. The role leads client engagements, workshops, assessments, architecture reviews, implementation planning, and technical findings presentations, and produces technical assessments, risk and data-exposure reports, control recommendations, implementation plans, and remediation recommendations.

Requirements

At least 5 years of cybersecurity, governance, compliance, Microsoft Purview, or Microsoft security consulting experience.
Experience leading customer-facing technical security, compliance, or implementation engagements.
Hands-on experience with Microsoft Purview assessment, architecture, configuration, implementation, testing, and validation.
Strong knowledge of Microsoft 365 security, compliance, identity, access, information-protection, and data-governance capabilities.
Experience assessing identity, access management, permissions, data exposure, and AI-related security controls.
Excellent executive communication and presentation skills.
Ability to translate technical findings into business-focused risk, control, and remediation recommendations.
Experience creating technical assessment reports, control recommendations, implementation plans, and remediation plans.
Comfort facilitating workshops, conducting stakeholder interviews, presenting findings, and managing complex client discussions.

Nice To Haves

Microsoft Purview certifications.
Microsoft Security certifications.
Experience with Microsoft 365 Copilot deployments.
Experience with Microsoft Defender technologies.
Understanding of AI governance frameworks and responsible AI principles.
Knowledge of the NIST AI Risk Management Framework (AI RMF).
Experience supporting regulated industries, including healthcare, financial services, and legal organizations.
Familiarity with ChatGPT Enterprise, Claude Business, Snowflake Cortex, and other enterprise AI platforms.
Experience developing AI usage policies and governance standards.

Responsibilities

Serve as Thrive’s technical subject matter expert for Microsoft Purview architecture, implementation, testing, and validation within AI Services.
Assess client compliance, governance-control, data-protection, and information-protection requirements from a technical security perspective.
Design, configure, implement, test, and validate Microsoft Purview solutions, including Information Protection, Sensitivity Labels, Data Loss Prevention (DLP), Data Lifecycle Management, AI-DSPM, Records Management, eDiscovery, Communication Compliance, Insider Risk Management, and Compliance Manager.
Contribute technical control recommendations to governance roadmaps and compliance strategies developed with Microsoft Advisory.
Lead Purview technical workshops, architecture reviews, implementation-planning sessions, and technical findings readouts.
Conduct technical AI security readiness assessments, governance-control maturity reviews, data-exposure analysis, privacy and compliance reviews, AI risk assessments, vendor security evaluations, and policy and control recommendations.
Assess AI platforms including Microsoft 365 Copilot, Microsoft Copilot Chat, Copilot Studio, ChatGPT Business and Enterprise, Claude Business and Enterprise, Snowflake Cortex, third-party AI platforms and agents, and emerging enterprise AI technologies.
Lead technical discovery and assessments of Microsoft 365 security posture, data exposure, permissions, identity controls, and AI-related risks.
Review Microsoft 365 tenant security, SharePoint permissions, OneDrive data exposure, Teams governance, Microsoft Entra ID security, Conditional Access, sensitive data discovery, identity and access management, external sharing, and security control gaps.
Deliver technical findings and remediation recommendations supporting Microsoft Advisory’s Copilot readiness, adoption, governance, and executive-roadmap deliverables.
Partner with Microsoft Advisory and client leadership to contribute technical security, risk, privacy, and governance-control expertise to AI governance strategies and roadmaps.
Facilitate technical governance-control workshops and provide AI policy control input, technical validation, risk and remediation planning, security and privacy control design, compliance control mapping, and implementation planning.
Help clients balance innovation with security, compliance, responsible AI practices, and technically validated governance controls.
Act as the primary technical security and governance-control architect during AI Services engagements, partnering with Microsoft Advisory on Microsoft strategy, adoption, licensing, readiness, optimization, operating models, and executive roadmaps.
Engage with CIOs, CISOs, IT Directors, Compliance Officers, Risk Leaders, Legal Teams, Security Teams, and executive leadership; facilitate workshops, conduct stakeholder interviews, present findings, and manage complex client discussions.
Collaborate with the AI Governance team on governance monitoring, managed governance services, compliance reporting, control oversight, and coordination of SOC support for AI-related monitoring, investigations, escalations, and response workflows.
Collaborate with Cloud Security on identity and access management, security architecture reviews, and Zero Trust initiatives.
Coordinate with Security Operations Center teams through the AI Governance team for AI-related monitoring, investigations, incident-response coordination, and threat escalation needs.
Work with AI Services teams on Copilot deployment security and control validation, AI solution security architecture, technical AI security and governance-control services, and secure AI enablement.
Produce AI security and technical readiness assessments, Microsoft 365 AI security and data-exposure findings, Purview technical assessments and implementation plans, security and privacy control reviews, data-exposure reports, technical risk registers, policy-control recommendations, and technical findings and remediation recommendations.