Microsoft Security and Compliance Consultant

Key Responsibilities

Serve as a primary technical lead on client engagements involving Microsoft security, compliance, and data protection solutions

Design and implement data security, governance, and compliance strategies aligned with Microsoft 365 and Azure capabilities

Advise clients on secure adoption of Microsoft Copilot, including data exposure risks, governance controls, and compliance considerations

Architect and deploy solutions leveraging tools such as: Microsoft Purview, Microsoft Defender suite and Microsoft Sentinel

Translate regulatory and compliance requirements into actionable technical solutions (e.g., ISO frameworks, government regulations, internal controls)

Conduct data discovery, classification, and protection strategy design

Collaborate with project managers and stakeholders to deliver high-quality outcomes

Contribute to pre-sales efforts, including solution design, scoping, and level-of-effort estimates

Create technical documentation, implementation guides, and client training materials

Act as a subject matter expert (SME) and mentor to other engineers

Develop and refine repeatable offerings around data security, compliance, and Copilot readiness

Stay current on evolving Microsoft security, compliance, and AI governance capabilities

Knowledge, Skills, and Abilities

Strong experience with Microsoft Security and Compliance ecosystem, including: Pruview, DLP, Records Management, Microsoft Defender Suite and Microsoft Sentinel

Deep understanding of data security concepts, including: DLP, Data Classification and labeling, and Insider risk and information governance

Experience advising on Microsoft 365 Copilot readiness, including: Data exposure risks, permission and access reviews, and governance and compliance controls.

Knowledge of identity and access management, including: Entra ID, Conditional Access and MFA and Identity governance

Ability to architect and communicate solutions to both technical and business stakeholders

Experience mapping compliance requirements to technical implementations

Strong consulting skills, including: Requirements gathering, solution design and client communication and presentation

Experience developing documentation and reusable frameworks

Familiarity with scripting (e.g., PowerShell)

Demonstrated commitment to continuous learning in security, compliance, and AI governance

Desired Qualifications

Bachelor’s degree in technical field and/or equivalent experience

5+ years of experience in Microsoft cloud security and compliance consulting

Relevant Microsoft certifications, such as:

SC-401 (Information Security Administrator Associate) - preferred

SC-400 (Information Protection & Compliance Administrator)

SC-200 (Security Operations Analyst)

SC-300 (Identity and Access Administrator)

Experience supporting State and Local Government or regulated industries

Familiarity with:

Data lifecycle and records management

Privileged Identity Management (PIM) / Privileged Access Management (PAM)

Enterprise applications and identity integrations

Strong technical writing and analytical skills

Ability to manage deliverables across multiple concurrent projects

Self-motivated with the ability to work effectively in a remote environment