Microsoft 365 Security and Compliance Specialist

Great British Energy Group; Cardiff; Remote; GBP 111,000 - 138,000; Full time

Job summary

Companies House is seeking a Microsoft 365 Security & Compliance Specialist to design, implement and administer security controls across the organisation’s Microsoft 365 environment. You will lead the deployment of Purview, Defender and Entra ID, develop data protection policies, and support investigations and audits under SC clearance requirements.

This is a 6‑month remote contract inside IR35 with a UK focus on regulatory compliance.

Qualifications

• Strong experience administering and implementing Microsoft 365 Security and Compliance solutions.
• Hands-on experience with Purview, Defender and Entra ID.
• Expertise in information protection, DLP, data classification, and retention policies.
• Experience supporting security investigations, incident response and compliance activities.
• Knowledge of security governance, risk management and regulatory compliance requirements.
• Experience creating technical documentation, standards and procedures.
• Strong stakeholder engagement and communication skills.
• Ability to translate technical security concepts into practical business recommendations.

Responsibilities

• Design, implement, and administer Microsoft 365 security and compliance solutions.
• Lead the deployment and optimisation of Purview, Defender, and Entra security capabilities.
• Develop and maintain policies relating to information protection, data governance, retention, DLP and secure collaboration.
• Support security investigations, evidence gathering, and remediation recommendations.
• Assess existing security controls and strengthen Microsoft 365 security posture, resilience and compliance.
• Provide specialist advice and risk-based recommendations to technical teams and business leaders.
• Produce technical documentation, standards, procedures, and implementation guidance.
• Support audits against ISO27001, GDPR, Cyber Essentials, GovS 007, and GovS 013.

Skills

M365 Security

DLP & Data classification

Policy development

Incident response

Governance & risk

Documentation

Stakeholder engagement

Security compliance

Tools

Microsoft Purview

Microsoft Defender

Microsoft Entra ID

Job description

On behalf of Companies House, we are looking for a Microsoft 365 Security & Compliance Specialist (Inside IR35) for a 6 month contract based REMOTELY.Companies House drives confidence in the economy and makes the UK a great place to start, and run, a business.About the roleWe're looking for an experienced Microsoft 365 Security & Compliance Specialist to help strengthen and enhance Companies House's Microsoft 365 security capabilities. You'll play a key role in the implementation and optimisation of Microsoft Purview, Microsoft Defender and Microsoft Entra ID, helping to protect organisational data, improve compliance controls and support the delivery of a secure and resilient digital environment.As a Microsoft 365 Security & Compliance Specialist, your main responsibilities will be to:* Design, implement, and administer Microsoft 365 security and compliance solutions.* Lead the deployment and optimisation of Microsoft Purview, Microsoft Defender, and Microsoft Entra security capabilities.* Develop and maintain policies relating to information protection, data governance, retention, Data Loss Prevention (DLP) and secure collaboration.* Support security and compliance investigations, providing technical analysis, evidence gathering, and recommendations for remediation.* Assess existing security controls and identify opportunities to strengthen the Microsoft 365 security posture, resilience and compliance capabilities.* Provide specialist advice and risk-based recommendations to technical teams, project stakeholders, and business leaders.* Produce technical documentation, standards, procedures, and implementation guidance.* Support audit, assurance, and compliance activities against frameworks including ISO27001, GDPR, Cyber Essentials, GovS 007, and GovS 013.* Work closely with cyber security, architecture, data protection, governance, digital delivery, and supplier teams to embed security-by-design principles.* Promote security and compliance best practices, providing guidance and recommendations to technical and business stakeholders.SC Clearance is an essential requirement for this role, as a minimum you must be willing & eligible to undergo checks. Please note, due to the exceptional requirements of this position (short-term nature of this role and speed at which we require a postholder in situ) preference may be given to candidates who meet all of the essential criteria and hold active SC clearance.Essential:* Strong experience administering and implementing Microsoft 365 Security and Compliance solutions.* Hands-on experience with Microsoft Purview, Microsoft Defender, and Microsoft Entra ID.* Expertise in Information Protection, Data Loss Prevention (DLP), data classification, and retention policies.* Experience supporting security investigations, incident response, and compliance activities.* Knowledge of security governance, risk management, and regulatory compliance requirements.* Experience creating technical documentation, standards, and operational procedures.* Strong stakeholder engagement and communication skills.* Ability to translate technical security concepts into practical business recommendations.Please be aware that this role can only be worked within the UK and not Overseas.Disability ConfidentAs a Disability Confident employer, Companies House encourage applications from disabled and neurodivergent candidates. Applications from candidates who identify as having a disability and meet the essential criteria for the role will be prioritised for review. Where application volumes are high, additional role-specific and desirable criteria may be applied as part of the shortlisting process which may include holding active security clearance.Armed Forces CommitmentAs a signatory of the Armed Forces Covenant, Companies House welcome applications from veterans, service leavers, reservists and military spouses or partners. Applications from eligible candidates who meet the essential criteria for the role will be prioritised for review. Where application volumes are high, additional role-specific and desirable criteria may be applied as part of the shortlisting process which may include holding active security clearance.In applying for this role, you acknowledge the following \"this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different\".