Microsoft Security SME

Harvey Nash; Leeds; Hybrid; GBP 42,000 - 70,000; Full time

Job summary

Harvey Nash is looking for a Microsoft Security SME in Leeds to own Microsoft security, identity, data protection and compliance across a complex tech environment. You’ll work with senior stakeholders to identify risks and deliver improvements across Microsoft 365, Azure and Entra ID.

As the Microsoft Security SME, you will design and manage Purview, DLP and related information protection controls, while strengthening security tooling and governance across the organisation.

Qualifications

• Proven experience in senior or technically responsible security roles.
• Experience with Microsoft Entra ID, Microsoft 365 and Azure.
• Strong understanding of Information Security, Data Loss Prevention, risk management.
• Experience with identity management, RBAC and access controls.
• Experience with Microsoft Purview or similar data protection tools.

Responsibilities

• Manage and improve Microsoft security tooling and controls.
• Lead data protection and governance using Purview and DLP.
• Oversee identity governance across Joiner-Mover-Leaver lifecycle.
• Conduct access reviews and risk-based remediation.
• Escalate security risks and influence senior stakeholders.

Skills

Microsoft Entra ID

Microsoft 365

Azure

RBAC

Identity governance

Active Directory

Data protection

Information Security

ISO 27001

Cyber Essentials Plus

Tools

Microsoft Purview

Entra ID Governance

Job description

Salary: Up to £70,000 + fantastic benefits

We’re looking for a Microsoft Security SME to join a growing security function in Leeds. This is an exciting opportunity for an experienced security professional to take ownership of Microsoft security, identity, data protection and compliance capabilities across a complex technology environment.

You’ll play a key role in strengthening security controls, improving Microsoft security tooling and helping the organisation manage risk across Microsoft 365, Azure and Entra ID.

The Role

As the Microsoft Security SME, you’ll be responsible for supporting and improving security capabilities across a range of Microsoft technologies. You’ll work closely with technical teams and senior stakeholders to identify risks, strengthen controls and deliver practical security improvements.

Key Responsibilities

Microsoft Security Tooling

• Manage, maintain and continuously improve Microsoft security, compliance, user and data protection tooling.
• Contribute to security control effectiveness, remediation activity and ongoing service improvements.
• Help ensure Microsoft security capabilities are effectively configured and aligned with organisational requirements.

Microsoft Purview & Data Protection

• Design, implement and manage Microsoft Purview, Data Loss Prevention (DLP) and related information protection controls.
• Support data security, governance and regulatory compliance across the organisation.
• Identify opportunities to improve data protection and information security controls.

Identity & Access Management

• Lead and support identity governance, access control and RBAC activity across the Joiner-Mover-Leaver lifecycle.
• Conduct access reviews and control checks.
• Help develop and improve identity governance capabilities, particularly within Microsoft Entra ID Governance.
• Identify security risks, vulnerabilities, control gaps and emerging threats.
• Support proportionate remediation and risk treatment activity.
• Escalate security risks appropriately and contribute to improving the organisation’s overall security posture.

What We’re Looking For

We’re looking for someone with a strong background in security who can combine technical Microsoft expertise with a practical understanding of security controls, risk and governance.

• Proven experience in a senior or technically responsible security role within an environment using Microsoft Entra ID, Microsoft 365 and Azure.
• Strong understanding of Information Security, Data Loss Prevention, Information Security Risk Management and associated security controls.
• Experience with identity management, RBAC and access controls.
• Experience with Microsoft Entra ID Governance or comparable identity governance technologies.
• Strong experience with Microsoft security, compliance or data protection tooling, ideally including Microsoft Purview and DLP.
• Comfortable working with and influencing senior stakeholders.
• Experience working with recognised security frameworks and standards such as Cyber Essentials Plus, NIST and/or ISO 27001.
• Ability to work independently, manage competing priorities and contribute effectively as part of a wider team.
• Good understanding of data protection responsibilities and how they apply to information security.

Key Shortlisting Criteria

To be considered for the role, your CV should demonstrate:

• Genuine experience in Information Security, or clear evidence that you are actively developing a career in Security with relevant knowledge and experience.
• Experience delivering or supporting security-related projects, such as:
• Identity and access management
• Identity governance
• Access controls
• Security controls
• Supplier/security due diligence
• Data protection
• Experience working with recognised security frameworks, such as Cyber Essentials Plus, NIST or ISO 27001.
• Hands-on or strong practical understanding of:
• Active Directory
• Microsoft 365 / Cloud

Why Join?

This is a fantastic opportunity to join an organisation where you’ll have genuine influence over security capability and be able to make a tangible difference to the wider security posture.

You’ll receive a salary of up to £70,000, fantastic benefits and the flexibility of a hybrid working model with 3 days per week in Leeds.