M365 Security SME

Harvey Nash IT Recruitment UK; Ouzlewell Green; Hybrid; GBP 68,000 - 83,000; Full time

Benefits offered by this job

Fantastic benefits

Job summary

Harvey Nash IT Recruitment UK is seeking a Microsoft Security SME to join our Leeds security team. You will own Microsoft security, identity, data protection and compliance across a complex technology environment.

In this role you will work with technical teams and senior stakeholders to strengthen controls, implement Purview and DLP, and manage Entra ID governance.

The position offers hybrid working with 3 days in Leeds and a salary up to £75,000 plus benefits.

Qualifications

• Proven experience in a senior or technically responsible security role with Microsoft Entra ID, Microsoft 365 and Azure.
• Strong knowledge of Information Security, Data Loss Prevention, risk management and controls.
• Experience with identity management, RBAC and access controls.
• Experience with Microsoft Purview and DLP tooling is desirable.

Responsibilities

• Lead and manage Microsoft security tooling improvements and governance.
• Collaborate with senior stakeholders to identify risks and implement controls.
• Design and implement Purview, DLP and data protection controls.
• Oversee RBAC activities across joiner-mover-leaver lifecycle.

Skills

Microsoft Entra ID

Azure

RBAC

Information Security

Data Protection

Governance

Stakeholder management

Security tooling

Risk management

Tools

Microsoft Purview

DLP tooling

Microsoft 365

Entra ID Governance tooling

Job description

Microsoft Security SME

Location: Leeds - 3 days per week

Salary: Up to £75,000 + fantastic benefits

We're looking for a Microsoft Security SME to join a growing security function in Leeds. This is an exciting opportunity for an experienced security professional to take ownership of Microsoft security, identity, data protection and compliance capabilities across a complex technology environment.

You’ll play a key role in strengthening security controls, improving Microsoft security tooling and helping the organisation manage risk across Microsoft 365, Azure and Entra ID.

The Role

As the Microsoft Security SME, you'll be responsible for supporting and improving security capabilities across a range of Microsoft technologies. You'll work closely with technical teams and senior stakeholders to identify risks, strengthen controls and deliver practical security improvements.

Key Responsibilities

Microsoft Security Tooling

• Manage, maintain and continuously improve Microsoft security, compliance, user and data protection tooling.
• Contribute to security control effectiveness, remediation activity and ongoing service improvements.
• Help ensure Microsoft security capabilities are effectively configured and aligned with organisational requirements.

Microsoft Purview & Data Protection

• Design, implement and manage Microsoft Purview, Data Loss Prevention (DLP) and related information protection controls.
• Support data security, governance and regulatory compliance across the organisation.
• Identify opportunities to improve data protection and information security controls.

Identity & Access Management

• Lead and support identity governance, access control and RBAC activity across the Joiner-Mover-Leaver life cycle.
• Conduct access reviews and control checks.
• Help develop and improve identity governance capabilities, particularly within Microsoft Entra ID Governance.

Risk & Control Assessment

• Identify security risks, vulnerabilities, control gaps and emerging threats.
• Support proportionate remediation and risk treatment activity.
• Escalate security risks appropriately and contribute to improving the organisation’s overall security posture.

What We’re Looking For

We're looking for someone with a strong background in security who can combine technical Microsoft expertise with a practical understanding of security controls, risk and governance.

Essential Experience

• Proven experience in a senior or technically responsible security role within an environment using Microsoft Entra ID, Microsoft 365 and Azure.
• Strong understanding of Information Security, Data Loss Prevention, Information Security Risk Management and associated security controls.
• Experience with identity management, RBAC and access controls.
• Experience with Microsoft Entra ID Governance or comparable identity governance technologies.
• Strong experience with Microsoft security, compliance or data protection tooling, ideally including Microsoft Purview and DLP.
• Comfortable working with and influencing senior stakeholders.
• Experience working with recognised security frameworks and standards such as Cyber Essentials Plus, NIST and/or ISO 27001.
• Ability to work independently, manage competing priorities and contribute effectively as part of a wider team.
• Good understanding of data protection responsibilities and how they apply to information security.

Key Shortlisting Criteria

To be considered for the role, your CV should demonstrate:

• Genuine experience in Information Security, or clear evidence that you are actively developing a career in Security with relevant knowledge and experience.

Experience delivering or supporting security-related projects, such as:

• Identity and access management
• Identity governance
• Access controls
• Security controls
• Supplier/security due diligence
• Data protection
• Experience working with recognised security frameworks, such as Cyber Essentials Plus, NIST or ISO 27001.

Hands-on or strong practical understanding of:

• Microsoft Entra ID
• Azure
• Active Directory
• Microsoft 365/Cloud
• SaaS environments

Why Join?

This is a fantastic opportunity to join an organisation where you'll have genuine influence over security capability and be able to make a tangible difference to the wider security posture.

You’ll receive a salary of up to £75,000, fantastic benefits and the flexibility of a hybrid working model with 3 days per week in Leeds.