M365 & Azure Security Supervisor (HLS)

RSM US LLP; Charlotte (NC); On-site; USD 101,000 - 203,000; Full time

Benefits offered by this job

Flexible schedule

Competitive benefits

Job summary

RSM US LLP is seeking a highly skilled Supervisor to secure Microsoft 365 environments and implement Identity, and Compliance controls. You will design and deploy Windows Hello for Business with Intune and Entra Connect and manage Microsoft Purview data protection, DLP, and governance policies.

You will also configure Defender Suite, CIS Benchmarks, and Zero Trust access while guiding clients on security best practices and delivering workshops.

Qualifications

• 7+ years of experience in Microsoft 365 Security, Identity, and Compliance.
• Proven expertise in Windows Hello for Business deployments with Intune and Entra Connect.
• Strong skills in Conditional Access, MFA, and the Microsoft Defender Suite.
• Hands-on experience with AIP, DLP, Sensitivity Labels, and Insider Risk Management in Microsoft Purview.
• Familiarity with CIS Benchmarks and secure configuration practices.
• Strong problem-solving and troubleshooting skills with the ability to work independently or collaboratively.
• Excellent communication skills, with the ability to present complex security and compliance concepts to both technical and non-technical audiences.

Responsibilities

• Microsoft 365 Administration: Oversee and secure Microsoft 365 environments, including Exchange Online, SharePoint, OneDrive, Teams, and other M365 services, ensuring operational excellence and compliance.
• Identity & Access Security: Design, configure, and manage Windows Hello for Business deployments using Intune and Entra Connect to deliver secure authentication experiences.
• Microsoft Purview Data Protection: Configure and manage Azure Information Protection (AIP), Data Loss Prevention (DLP), Sensitivity Labels, and Information Governance policies to classify, label, and protect sensitive data.
• Compliance & Risk Management: Deploy and maintain Microsoft Purview features such as Insider Risk Management, Communication Compliance, and Audit to meet organizational and regulatory requirements.
• Microsoft Defender Suite: Configure and optimize Microsoft Defender for Office 365, Defender for Endpoint, and Defender for Cloud Apps for comprehensive threat detection and protection.
• CIS Benchmark Deployment: Apply CIS Benchmarks to Microsoft 365 and Windows environments to align with industry security standards.
• Conditional Access & Zero Trust: Design, implement, and troubleshoot Conditional Access policies, compliant device enforcement, and Zero Trust access models.
• Client Consultation & Training: Act as a subject matter expert, advising clients on Microsoft 365 security best practices, delivering workshops, and addressing security and compliance queries.

Skills

Microsoft 365 Security

Windows Hello for Business

Intune

Entra Connect

Microsoft Purview

AIP

DLP

Conditional Access

Zero Trust

Defender Suite

Tools

Intune

Entra Connect

Microsoft Purview

Azure Information Protection

Job description

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM. We are seeking a highly skilled Supervisor with a strong background in Microsoft 365 Security, Identity, and Compliance to join our team. The ideal candidate will have hands-on experience with Windows Hello for Business deployments leveraging Intune and Microsoft Entra Connect, Microsoft Purview (AIP, DLP, Insider Risk), Conditional Access, and Microsoft’s Defender Suite, along with a solid understanding of the Center for Internet Security (CIS) Benchmarks. This role is ideal for a proactive professional who is passionate about protecting identities, securing data, enabling secure, productive workplaces, and delivering top-tier client service.

Key Responsibilities

• Microsoft 365 Administration: Oversee and secure Microsoft 365 environments, including Exchange Online, SharePoint, OneDrive, Teams, and other M365 services, ensuring operational excellence and compliance.
• Identity & Access Security: Design, configure, and manage Windows Hello for Business deployments using Intune and Entra Connect to deliver secure authentication experiences.
• Microsoft Purview Data Protection: Configure and manage Azure Information Protection (AIP), Data Loss Prevention (DLP), Sensitivity Labels, and Information Governance policies to classify, label, and protect sensitive data.
• Compliance & Risk Management: Deploy and maintain Microsoft Purview features such as Insider Risk Management, Communication Compliance, and Audit to meet organizational and regulatory requirements.
• Microsoft Defender Suite: Configure and optimize Microsoft Defender for Office 365, Defender for Endpoint, and Defender for Cloud Apps for comprehensive threat detection and protection.
• CIS Benchmark Deployment: Apply CIS Benchmarks to Microsoft 365 and Windows environments to align with industry security standards.
• Conditional Access & Zero Trust: Design, implement, and troubleshoot Conditional Access policies, compliant device enforcement, and Zero Trust access models.
• Client Consultation & Training: Act as a subject matter expert, advising clients on Microsoft 365 security best practices, delivering workshops, and addressing security and compliance queries.

Preferred Skills & Qualifications

• 7+ years of experience in Microsoft 365 Security, Identity, and Compliance.
• Proven expertise in Windows Hello for Business deployments with Intune and Entra Connect.
• Strong skills in Conditional Access, MFA, and the Microsoft Defender Suite.
• Hands-on experience with AIP, DLP, Sensitivity Labels, and Insider Risk Management in Microsoft Purview.
• Familiarity with CIS Benchmarks and secure configuration practices.
• Strong problem-solving and troubleshooting skills with the ability to work independently or collaboratively.
• Excellent communication skills, with the ability to present complex security and compliance concepts to both technical and non-technical audiences.
• Relevant Microsoft Security certifications (SC-100, SC-200, SC-300, and SC-401) preferred.

Benefits and Compensation

• At RSM, we offer a competitive benefits and compensation package for all our people.
• We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients.

Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits.

All applicants will receive consideration for employment as RSM does not tolerate discrimination and/or harassment based on race; color; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender; sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the US uniformed service; US Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable federal, state or local law. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership.

RSM does not intend to hire entry level candidates who will require sponsorship now OR in the future (i.e. F-1 visa holders). If you are a recent U.S. college / university graduate possessing 1-2 years of progressive and relevant work experience in a same or similar role to the one for which you are applying, excluding internships, you may be eligible for hire as an experienced associate.

RSM will consider for employment qualified applicants with arrest or conviction records.

For those living in California or applying to a position in California, please click here for additional information.

Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership.

RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities.

If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please call us at 800-274-3978 or send us an email at [e-mail].

Compensation Range: $101,000 - $203,000 Individuals selected for this role will be eligible for a discretionary bonus based on firm and individual performance.

Why work at RSM?

At RSM, we accomplish meaningful work and make an impact on the world around us. We work hard to fully understand our clients and work even harder to understand and identify your unique skills. We celebrate the differences among us and empower our talented professionals to grow forward, both personally and professionally. Our clients benefit from fresh insights and energy as we collaborate to support them, and our teams enjoy a work environment that inspires and empowers them to thrive.