M365 Security SME

Harvey Nash Group; Leeds; Hybrid; GBP 68,000 - 83,000; Full time

Benefits offered by this job

Fantastic benefits

Hybrid work model

Job summary

Harvey Nash Group is seeking a Microsoft Security SME in Leeds with 3 days per week presence. You will own Microsoft security, identity, data protection and compliance across a complex tech environment, working with senior stakeholders to strengthen controls and tooling across Microsoft 365, Azure and Entra ID.

The role focuses on delivering practical security improvements, enhancing tooling, and maintaining alignment with regulatory requirements, with a hybrid work model in Leeds.

Qualifications

• Proven experience in a senior security role with Microsoft Entra ID, Microsoft 365 and Azure.
• Strong understanding of Information Security, Data Loss Prevention (DLP), and security risk management.
• Experience with identity management, RBAC and access controls.
• Experience with Microsoft Entra ID Governance or similar identity governance tools.
• Strong experience with Microsoft Purview and DLP.
• Comfortable engaging with senior stakeholders and influencing security decisions.
• Experience with recognised security frameworks such as Cyber Essentials Plus, NIST or ISO 27001.
• Ability to work independently and manage multiple priorities.

Responsibilities

• Manage, maintain and continuously improve Microsoft security, compliance, user and data protection tooling.
• Design, implement and manage Microsoft Purview, DLP and related information protection controls.
• Lead identity governance, access control and RBAC across Joiner-Mover-Leaver lifecycle.
• Identify security risks, vulnerabilities and control gaps and drive remediation.
• Collaborate with technical teams and stakeholders to strengthen security posture.

Skills

Microsoft Entra ID

Azure

Active Directory

Microsoft 365

RBAC

Purview

DLP

Entra ID Governance

Job description

Microsoft Security SME

Location: Leeds - 3 days per week

Salary: Up to £70,000 + fantastic benefits

We're looking for a Microsoft Security SME to join a growing security function in Leeds. This is an exciting opportunity for an experienced security professional to take ownership of Microsoft security, identity, data protection and compliance capabilities across a complex technology environment.

You’ll play a key role in strengthening security controls, improving Microsoft security tooling and helping the organisation manage risk across Microsoft 365, Azure and Entra ID.

The Role

As the Microsoft Security SME, you’ll be responsible for supporting and improving security capabilities across a range of Microsoft technologies. You’ll work closely with technical teams and senior stakeholders to identify risks, strengthen controls and deliver practical security improvements.

Key Responsibilities

Microsoft Security Tooling

• Manage, maintain and continuously improve Microsoft security, compliance, user and data protection tooling.
• Contribute to security control effectiveness, remediation activity and ongoing service improvements.
• Help ensure Microsoft security capabilities are effectively configured and aligned with organisational requirements.

Microsoft Purview & Data Protection

• Design, implement and manage Microsoft Purview, Data Loss Prevention (DLP) and related information protection controls.
• Support data security, governance and regulatory compliance across the organisation.
• Identify opportunities to improve data protection and information security controls.

Identity & Access Management

• Lead and support identity governance, access control and RBAC activity across the Joiner-Mover-Leaver lifecycle.
• Conduct access reviews and control checks.
• Help develop and improve identity governance capabilities, particularly within Microsoft Entra ID Governance.

Risk & Control Assessment

• Identify security risks, vulnerabilities, control gaps and emerging threats.
• Support proportionate remediation and risk treatment activity.
• Escalate security risks appropriately and contribute to improving the organisation's overall security posture.

What We're Looking For

We're looking for someone with a strong background in security who can combine technical Microsoft expertise with a practical understanding of security controls, risk and governance.

Essential Experience

• Proven experience in a senior or technically responsible security role within an environment using Microsoft Entra ID, Microsoft 365 and Azure.
• Strong understanding of Information Security, Data Loss Prevention, Information Security Risk Management and associated security controls.
• Experience with identity management, RBAC and access controls.
• Experience with Microsoft Entra ID Governance or comparable identity governance technologies.
• Strong experience with Microsoft security, compliance or data protection tooling, ideally including Microsoft Purview and DLP.
• Comfortable working with and influencing senior stakeholders.
• Experience working with recognised security frameworks and standards such as Cyber Essentials Plus, NIST and/or ISO 27001.
• Ability to work independently, manage competing priorities and contribute effectively as part of a wider team.
• Good understanding of data protection responsibilities and how they apply to information security.

Key Shortlisting Criteria

To be considered for the role, your CV should demonstrate:

• Genuine experience in Information Security, or clear evidence that you are actively developing a career in Security with relevant knowledge and experience.
• Experience delivering or supporting security-related projects, such as:
• Identity and access management
• Identity governance
• Access controls
• Security controls
• Supplier/security due diligence
• Data protection
• Experience working with recognised security frameworks, such as Cyber Essentials Plus, NIST or ISO 27001.
• Hands-on or strong practical understanding of:
• Microsoft Entra ID
• Azure
• Active Directory
• Microsoft 365 / Cloud
• SaaS environments

Why Join?

This is a fantastic opportunity to join an organisation where you'll have genuine influence over security capability and be able to make a tangible difference to the wider security posture.

You’ll receive a salary of up to £75,000, fantastic benefits and the flexibility of a hybrid working model with 3 days per week in Leeds.

If you're a Microsoft-focused security professional looking for your next challenge, we'd love to hear from you.