Senior Microsoft 365 Information Security Engineer – Data Protection & Insider Risk

Brown Brothers Harriman•Jersey City, NJ

1d•$110,000 - $160,000

About The Position

We are seeking a senior-level Microsoft 365 Information Security Engineer with deep expertise in Microsoft Purview, Data Protection, Insider Risk Management, Identity Security, and Governance to lead the design, implementation, and operation of enterprise security and compliance solutions across Microsoft 365. This role serves as a technical leader and subject matter expert responsible for protecting sensitive information, reducing cyber risk, and enabling secure collaboration through Microsoft’s security ecosystem, including Purview, Entra ID, Sentinel, and Security Copilot. The ideal candidate will have extensive experience building and managing enterprise data protection programs, implementing insider risk controls, designing Zero Trust security architectures, and governing access to corporate data across Microsoft 365, Azure, and emerging AI technologies such as Microsoft 365 Copilot.

Requirements

5+ years of experience implementing and managing Microsoft 365 security and compliance solutions.
Strong hands-on expertise with Microsoft Purview, Entra ID, and Microsoft 365 Security & Compliance technologies.
Proven experience with data classification, sensitivity labeling, DLP, Insider Risk Management, identity governance, and access management.
Experience designing and implementing Zero Trust security architectures.
Deep understanding of enterprise cloud security, compliance frameworks, and risk mitigation strategies.

Nice To Haves

Microsoft certifications such as SC-100, SC-300, SC-400, SC-200, and AZ-305.
Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field.

Responsibilities

Lead the design and deployment of Microsoft Purview solutions including Information Protection, Data Loss Prevention (DLP), Insider Risk Management, eDiscovery, Records Management, and Data Security Posture Management (DSPM).
Develop and enforce enterprise data governance, classification, labeling, encryption, and compliance strategies.
Design and administer identity and access management controls leveraging Entra ID, Conditional Access, Privileged Identity Management (PIM), RBAC, ABAC, MFA, and Zero Trust frameworks.
Establish governance controls for Microsoft 365 Copilot and other AI platforms to prevent data leakage and ensure regulatory compliance.
Conduct security assessments, health checks, architecture reviews, and security remediation efforts across Microsoft 365 environments.
Partner with business stakeholders and security teams to develop policies, standards, and operational procedures that align with enterprise risk management objectives.
Provide technical leadership, mentorship, and strategic guidance on Microsoft security and compliance best practices.