Change Manager M365 Tenant & AI Integration

Decskill; Lisboa; On-site; EUR 65,000 - 90,000; Full time

Benefits offered by this job

Long-term projects with international/

Job summary

Decskill is hiring a Change Manager for a Lisbon project focusing on MS 365 change governance and AI integrations. You will own end-to-end change management across the M365 tenant, implement risk-based workflows, and ensure secure, compliant changes with a strong IAM perspective.

Required are 4+ years in Change Management or IT Governance, deep Microsoft 365 experience, and knowledge of Graph API, Entra ID, OAuth 2.0/OpenID Connect.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, or a related field.
• 4+ years in Change Management or IT Governance.
• Strong experience in enterprise Microsoft 365 environments.
• Advanced knowledge of Microsoft Graph API (REST endpoints, permissions, throttling, governance).
• Experience with Entra ID (Azure AD) App Registrations and permission management models.
• Strong understanding of OAuth 2.0, OpenID Connect, and API security patterns.
• Experience integrating and governing enterprise applications and APIs.
• Knowledge of Microsoft Copilot, Copilot APIs, and extensibility frameworks (MCPs / plugins / connectors).
• Experience in ITIL or equivalent Change Management frameworks.
• Strong understanding of Identity & Access Management (IAM) principles.

Responsibilities

• Own and govern the end-to-end change management lifecycle within the Microsoft 365 tenant, ensuring traceability, control, and proper approval of all changes.
• Define and implement change governance workflows, including risk assessment, impact analysis, and rollout/implementation strategies.
• Ensure security and compliance by design across all changes involving M365 services, APIs, and integrations.
• Evaluate, approve, and monitor application permissions (delegated and application permissions) within Entra ID.
• Manage the lifecycle of Azure AD / Entra ID App Registrations, identifying and mitigating over-privileged or misconfigured applications.
• Govern the usage of Microsoft Graph APIs across applications and services, ensuring controlled and compliant consumption.
• Review and approve custom integrations leveraging Microsoft Graph, Copilot APIs, and Microsoft Copilot extensibility (MCPs).
• Define and enforce guardrails for AI adoption within the M365 ecosystem, ensuring secure data access through AI systems.
• Control and govern third-party application integrations within Microsoft 365, ensuring compliance and security standards are met.
• Identify, assess, and track risks associated with changes, integrations, and access configurations.
• Implement continuous monitoring mechanisms for change-related risks, permissions, and integrations.
• Collaborate closely with technical and business stakeholders to ensure alignment between changes and business objectives.
• Ensure clear and effective communication of changes, impacts, risks, and governance decisions.

Skills

Change management

IT governance

Microsoft 365

Microsoft Graph API

Entra ID / Azure AD

App registrations

OAuth 2.0 / OpenID Connect

API security

IAM principles

ITIL framework

Education

Bachelor's degree in Computer Science/Software Engineering or related field

Tools

Microsoft Graph API

Entra ID App Registrations

Job description

We are growing. And we are looking for talented people.

At Decskill, we believe that technological excellence is driven by human talent.

We are an IT consulting company with more than 10 years of consolidated experience in the market, focused on building long-term relationships with both our clients and our people. Today, we are a community of over 800 professionals, working from Lisbon, Porto, and Madrid, contributing to impactful technology initiatives.

As part of the Astek Group, we combine a strong local culture with a global presence, being active in around 23 countries across 4 continents. This allows us to offer an international context, diverse challenges, and long-term career opportunities, while staying close to our teams.

We would like to meet a Change Manager M365 Tenant & AI Integration for a project in Lisbon.

Responsibilities

• Own and govern the end-to-end change management lifecycle within the Microsoft 365 tenant, ensuring traceability, control, and proper approval of all changes
• Define and implement change governance workflows, including risk assessment, impact analysis, and rollout/implementation strategies
• Ensure security and compliance by design across all changes involving M365 services, APIs, and integrations
• Evaluate, approve, and monitor application permissions (delegated and application permissions) within Entra ID
• Manage the lifecycle of Azure AD / Entra ID App Registrations, identifying and mitigating over-privileged or misconfigured applications
• Govern the usage of Microsoft Graph APIs across applications and services, ensuring controlled and compliant consumption
• Review and approve custom integrations leveraging Microsoft Graph, Copilot APIs, and Microsoft Copilot extensibility (MCPs)
• Define and enforce guardrails for AI adoption within the M365 ecosystem, ensuring secure data access through AI systems
• Control and govern third-party application integrations within Microsoft 365, ensuring compliance and security standards are met
• Identify, assess, and track risks associated with changes, integrations, and access configurations
• Implement continuous monitoring mechanisms for change-related risks, permissions, and integrations
• Collaborate closely with technical and business stakeholders to ensure alignment between changes and business objectives
• Ensure clear and effective communication of changes, impacts, risks, and governance decisions

Requirements

• Bachelor’s degree in Computer Science, Software Engineering, or a related field.
• More than 4 years of experience in Change Management, IT Governance, or similar roles;
• Strong experience in enterprise Microsoft 365 environments;
• Advanced knowledge of Microsoft Graph API (REST endpoints, permissions model, throttling, and governance practices);
• Experience with Entra ID (Azure AD) App Registrations and permission management models;
• Strong understanding of OAuth 2.0, OpenID Connect, and API security patterns;
• Experience integrating and governing enterprise applications and APIs;
• Knowledge of Microsoft Copilot, Copilot APIs, and extensibility frameworks (MCPs / plugins / connectors);
• Experience in risk management, compliance, and Change Management frameworks (ITIL or equivalent);
• Strong understanding of Identity & Access Management (IAM) principles;

Are you looking for an environment that values curiosity and commitment? Here, your contribution has real impact and individual growth is taken seriously.

Find with us the right opportunity to grow!

What you can expect from us

• Long-term projects with national and international context
• Opportunities to grow technically and professionally
• A people-first culture, focused on transparency and trust
• Teams that value ownership, collaboration and stability

Your next challenge might start here.

At Decskill, we are committed to equal opportunities and non-discrimination. We promote a culture of diversity and inclusion, where recruitment and career progression are based solely on talent, regardless of age, gender, ethnicity, race, nationality, or any other form of discrimination incompatible with human dignity.