Senior AI Security & Governance Consultant

Thrive

About The Position

Thrive is seeking a client-facing senior AI security professional to help organizations adopt AI safely, securely, and responsibly. The role is the technical authority within AI Services for AI security architecture, technical risk validation, Microsoft Purview implementation, and governance-control design. It assesses clients’ technical AI security readiness, data exposure, compliance risks, and governance requirements, then designs and validates practical controls that support confident AI deployment. The position leads Microsoft Purview technical assessments and implementation engagements, including architecture, configuration, testing, and validation across information protection, sensitivity labels, DLP, data lifecycle management, AI-DSPM, records management, eDiscovery, communication compliance, insider risk management, and Compliance Manager. It also conducts AI security and technical readiness assessments across Microsoft, OpenAI, Anthropic, Snowflake, and other enterprise AI platforms, and reviews Microsoft 365 security posture, permissions, identity controls, and AI-related data exposure. The consultant partners with Microsoft Advisory and client leaders to contribute technical security, privacy, risk, and governance-control expertise to AI strategies and roadmaps. The role leads client workshops, architecture reviews, stakeholder interviews, presentations, and technical findings readouts, and collaborates with AI Governance, Security Operations, Cloud Security, Microsoft Engineering Services, and AI Services teams. It produces technical assessments, findings, risk registers, control recommendations, and remediation and implementation plans. The role complements Microsoft Advisory’s work on Microsoft strategy, readiness, adoption, licensing, optimization, governance operating models, and executive roadmaps.

Requirements

At least 5 years of cybersecurity, governance, compliance, Microsoft Purview, or Microsoft security consulting experience.
Experience leading customer-facing technical security, compliance, or implementation engagements.
Hands-on experience with Microsoft Purview assessment, architecture, configuration, implementation, testing, and validation.
Strong knowledge of Microsoft 365 security, compliance, identity, access, information protection, and data governance capabilities.
Experience assessing identity, access management, permissions, data exposure, and AI-related security controls.
Excellent executive communication and presentation skills.
Ability to translate technical findings into business-focused risk, control, and remediation recommendations.
Experience creating technical assessment reports, control recommendations, implementation plans, and remediation plans.

Nice To Haves

Microsoft Purview certifications.
Microsoft Security certifications.
Experience with Microsoft 365 Copilot deployments.
Experience with Microsoft Defender technologies.
Understanding of AI governance frameworks and responsible AI principles.
Knowledge of the NIST AI Risk Management Framework (AI RMF).
Experience supporting regulated industries, including healthcare, financial services, and legal organizations.
Familiarity with ChatGPT Enterprise, Claude Business, Snowflake Cortex, and other enterprise AI platforms.
Experience developing AI usage policies and governance standards.

Responsibilities

Serve as Thrive’s technical subject matter expert for Microsoft Purview architecture, implementation, testing, and validation within AI Services.
Assess client compliance, governance-control, data-protection, and information-protection requirements from a technical security perspective.
Design, configure, implement, test, and validate Microsoft Purview solutions, including Information Protection, Sensitivity Labels, DLP, Data Lifecycle Management, AI-DSPM, Records Management, eDiscovery, Communication Compliance, Insider Risk Management, and Compliance Manager.
Contribute technical control recommendations to governance roadmaps and compliance strategies in partnership with Microsoft Advisory.
Lead Purview technical workshops, architecture reviews, implementation-planning sessions, and technical findings readouts.
Conduct AI security and technical readiness assessments for Microsoft 365 Copilot, Copilot Chat, Copilot Studio, ChatGPT Business and Enterprise, Claude Business and Enterprise, Snowflake Cortex, third-party AI platforms, AI agents, and emerging enterprise AI technologies.
Perform AI security assessments, technical governance-control maturity reviews, data exposure analyses, privacy and compliance reviews, AI risk assessments, vendor security evaluations, and policy and control recommendations.
Lead technical discovery and assessment engagements focused on Microsoft 365 security posture, data exposure, permissions, identity controls, and AI-related risk validation.
Conduct Microsoft 365 tenant security assessments, SharePoint permission reviews, OneDrive data exposure analyses, Teams governance reviews, Microsoft Entra ID security assessments, Conditional Access reviews, sensitive data discovery, identity and access management reviews, external sharing assessments, and security-control gap analyses.
Deliver technical findings and remediation recommendations that support Microsoft Advisory’s Copilot readiness, adoption, governance, and executive roadmap work.
Partner with Microsoft Advisory and client leadership to contribute technical security, risk, privacy, and governance-control expertise to AI governance strategies and roadmaps.
Lead technical governance-control workshops; provide technical input and validation for AI policy controls; plan technical risk remediation; design security, privacy, and data-protection controls; and map compliance controls to implementation plans.
Provide technical findings that inform executive briefings and roadmap recommendations led with Microsoft Advisory.
Help clients balance innovation with security, compliance, responsible AI practices, and technically validated governance controls.
Act as the primary technical security and governance-control architect during AI Services engagements while partnering with Microsoft Advisory on broader Microsoft strategy, adoption, licensing, readiness, optimization, operating models, and executive roadmaps.
Facilitate client workshops, conduct stakeholder interviews, present findings, and manage complex discussions with executive, IT, compliance, legal, risk, and security stakeholders.
Collaborate with Microsoft Advisory, the AI Governance team, Cloud Security, Security Operations, and AI Services on client recommendations, governance monitoring, compliance reporting, SOC coordination, identity and access management, security architecture, Zero Trust, Copilot security validation, and secure AI enablement.
Produce AI security and technical readiness assessments, Microsoft 365 AI security and data exposure findings, Microsoft Purview technical assessments, Purview architecture and implementation plans, security and privacy control reviews, data exposure reports, technical risk registers, AI policy control recommendations, technical findings readouts, and remediation recommendations.