M365 & Azure Security Supervisor (HLS)

RSM US LLP; Chicago (IL); On-site; USD 101,000 - 203,000; Full time

Benefits offered by this job

Discretionary bonus

Flexible schedule

Total rewards package

Job summary

RSM US LLP is seeking a highly skilled Supervisor with a strong background in Microsoft 365 Security, Identity, and Compliance to join our team in Chicago. The role focuses on securing Microsoft 365 environments, implementing Windows Hello for Business with Intune and Entra Connect, and leveraging Microsoft Purview and Defender Suite to protect data and meet regulatory requirements.

The candidate will guide clients on security best practices, conduct workshops, and engage in CIS Benchmark

Qualifications

• 7+ years of experience in Microsoft 365 Security, Identity, and Compliance.
• Proven expertise in Windows Hello for Business deployments with Intune and Entra Connect.
• Strong skills in Conditional Access, MFA, and the Microsoft Defender Suite.
• Hands‑on experience with AIP, DLP, Sensitivity Labels, and Insider Risk Management in Microsoft Purview.
• Familiarity with CIS Benchmarks and secure configuration practices.
• Strong problem‑solving and troubleshooting skills with the ability to work independently or collaboratively.
• Excellent communication skills, with the ability to present complex security and compliance concepts to both technical and non‑technical audiences.
• Relevant Microsoft Security certifications (SC‑100, SC‑200, SC‑300, and SC‑401) preferred.

Responsibilities

• Microsoft 365 Administration: Oversee and secure Microsoft 365 environments, including Exchange Online, SharePoint, OneDrive, Teams, and other M365 services, ensuring operational excellence and compliance.
• Identity & Access Security: Design, configure, and manage Windows Hello for Business deployments using Intune and Entra Connect to deliver secure authentication experiences.
• Microsoft Purview Data Protection: Configure and manage Azure Information Protection (AIP), Data Loss Prevention (DLP), Sensitivity Labels, and Information Governance policies to classify, label, and protect sensitive data.
• Compliance & Risk Management: Deploy and maintain Microsoft Purview features such as Insider Risk Management, Communication Compliance, and Audit to meet organizational and regulatory requirements.
• Microsoft Defender Suite: Configure and optimize Microsoft Defender for Office 365, Defender for Endpoint, and Defender for Cloud Apps for comprehensive threat detection and protection.
• CIS Benchmark Deployment: Apply CIS Benchmarks to Microsoft 365 and Windows environments to align with industry security standards.
• Conditional Access & Zero Trust: Design, implement, and troubleshoot Conditional Access policies, compliant device enforcement, and Zero Trust access models.
• Client Consultation & Training: Act as a subject matter expert, advising clients on Microsoft 365 security best practices, delivering workshops, and addressing security and compliance queries.

Skills

Microsoft 365 Security

Identity & Access Security

Microsoft Defender Suite

Conditional Access

MFA

CIS Benchmarks

Communication skills

Security certifications (SC-100/SC-200

Job description

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You'll find an environment that inspires and empowers you to thrive both personally and professionally. There's no one like you and that's why there's nowhere like RSM.

We are seeking a highly skilled Supervisor with a strong background in Microsoft 365 Security, Identity, and Compliance to join our team. The ideal candidate will have hands‑on experience with Windows Hello for Business deployments leveraging Intune and Microsoft Entra Connect, Microsoft Purview (AIP, DLP, Insider Risk), Conditional Access, and Microsoft's Defender Suite, along with a solid understanding of the Center for Internet Security (CIS) Benchmarks. This role is ideal for a proactive professional who is passionate about protecting identities, securing data, enabling secure, productive workplaces, and delivering top‑tier client service.

Key Responsibilities:

• Microsoft 365 Administration: Oversee and secure Microsoft 365 environments, including Exchange Online, SharePoint, OneDrive, Teams, and other M365 services, ensuring operational excellence and compliance.
• Identity & Access Security: Design, configure, and manage Windows Hello for Business deployments using Intune and Entra Connect to deliver secure authentication experiences.
• Microsoft Purview Data Protection: Configure and manage Azure Information Protection (AIP), Data Loss Prevention (DLP), Sensitivity Labels, and Information Governance policies to classify, label, and protect sensitive data.
• Compliance & Risk Management: Deploy and maintain Microsoft Purview features such as Insider Risk Management, Communication Compliance, and Audit to meet organizational and regulatory requirements.
• Microsoft Defender Suite: Configure and optimize Microsoft Defender for Office 365, Defender for Endpoint, and Defender for Cloud Apps for comprehensive threat detection and protection.
• CIS Benchmark Deployment: Apply CIS Benchmarks to Microsoft 365 and Windows environments to align with industry security standards.
• Conditional Access & Zero Trust: Design, implement, and troubleshoot Conditional Access policies, compliant device enforcement, and Zero Trust access models.
• Client Consultation & Training: Act as a subject matter expert, advising clients on Microsoft 365 security best practices, delivering workshops, and addressing security and compliance queries.

Preferred Skills & Qualifications:

• 7+ years of experience in Microsoft 365 Security, Identity, and Compliance.
• Proven expertise in Windows Hello for Business deployments with Intune and Entra Connect.
• Strong skills in Conditional Access, MFA, and the Microsoft Defender Suite.
• Hands‑on experience with AIP, DLP, Sensitivity Labels, and Insider Risk Management in Microsoft Purview.
• Familiarity with CIS Benchmarks and secure configuration practices.
• Strong problem‑solving and troubleshooting skills with the ability to work independently or collaboratively.
• Excellent communication skills, with the ability to present complex security and compliance concepts to both technical and non‑technical audiences.
• Relevant Microsoft Security certifications (SC‑100, SC‑200, SC‑300, and SC‑401) preferred.

At RSM, we offer a competitive benefits and compensation package for all our people.We offer flexibility in your schedule, empowering you to balance life's demands, while also maintaining your ability to serve clients.Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits.

All applicants will receive consideration for employment as RSM does not tolerate discrimination and/or harassment based on race; color; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender; sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the US uniformed service; US Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable federal, state or local law.

Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership.RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please call us at 800-274-3978 or send us an email at [e-mail].

RSM does not intend to hire entry level candidates who will require sponsorship now OR in the future (i.e. F-1 visa holders). If you are a recent U.S. college / university graduate possessing 1-2 years of progressive and relevant work experience in a same or similar role to the one for which you are applying, excluding internships, you may be eligible for hire as an experienced associate.

RSM will consider for employment qualified applicants with arrest or conviction records. For those living in California or applying to a position in California, please click here for additional information.

At RSM, an employee's pay at any point in their career is intended to reflect their experiences, performance, and skills for their current role. The salary range (or starting rate for interns and associates) for this role represents numerous factors considered in the hiring decisions including, but not limited to, education, skills, work experience, certifications, location, etc. As such, pay for the successful candidate(s) could fall anywhere within the stated range.

Compensation Range: $101,000 - $203,000

Individuals selected for this role will be eligible for a discretionary bonus based on firm and individual performance.