M365 & Azure Security Supervisor (HLS)

RSM US LLP; Cleveland (OH); On-site; USD 101,000 - 203,000; Full time

Job summary

RSM US LLP in Cleveland, OH, is seeking a skilled Supervisor in Microsoft 365 Security, Identity, and Compliance to help protect client environments. The role emphasizes Windows Hello for Business with Intune and Entra Connect, Purview data protection, Defender suites, and CIS Benchmarks.

You will design, implement, and optimize security controls across Microsoft 365 services, provide client training, and mentor staff while ensuring regulatory and security requirements are met.

Qualifications

• 7+ years of experience in Microsoft 365 Security, Identity, and Compliance.
• Hands-on Windows Hello for Business with Intune and Entra Connect.
• Strong skills in Conditional Access, MFA, and Defender Suite.
• Experience with AIP, DLP, and Sensitivity Labels in Purview.
• Familiarity with CIS Benchmarks and secure configurations.
• Excellent problem solving and communication skills.
• Relevant Microsoft Security certifications (SC-100, SC-200, SC-300, SC-401) preferred.

Responsibilities

• Oversee and secure Microsoft 365 environments (Exchange Online, SharePoint, OneDrive, Teams).
• Design and manage Windows Hello for Business deployments using Intune and Entra Connect.
• Configure Purview data protection features (AIP, DLP, labels, governance).
• Deploy Insider Risk, Communications Compliance, and Audit in Purview.
• Configure Defender for Office 365, Defender for Endpoint, and Defender for Cloud Apps.
• Apply CIS Benchmarks to Microsoft 365 and Windows environments.
• Design Conditional Access policies and Zero Trust access models.
• Provide client consultations and security training.

Skills

Microsoft 365 Security

Identity & Access Management

Compliance

Windows Hello for Business

Intune

Entra Connect

Microsoft Defender Suite

CIS Benchmarks

Zero Trust

Client Consultation

Training

Tools

Azure Information Protection (AIP)

Data Loss Prevention (DLP)

Insider Risk Management

Conditional Access

Audit

Microsoft Defender for Office 365

Defender for Endpoint

Defender for Cloud Apps

Entra Connect

M365 Exchange Online

Job description

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You'll find an environment that inspires and empowers you to thrive both personally and professionally. There's no one like you and that's why there's nowhere like RSM.

We are seeking a highly skilled Supervisor with a strong background in Microsoft 365 Security, Identity, and Compliance to join our team. The ideal candidate will have hands‑on experience with Windows Hello for Business deployments leveraging Intune and Microsoft Entra Connect, Microsoft Purview (AIP, DLP, Insider Risk), Conditional Access, and Microsoft's Defender Suite, along with a solid understanding of the Center for Internet Security (CIS) Benchmarks. This role is ideal for a proactive professional who is passionate about protecting identities, securing data, enabling secure, productive workplaces, and delivering top‑tier client service.

Key Responsibilities:

• Microsoft 365 Administration: Oversee and secure Microsoft 365 environments, including Exchange Online, SharePoint, OneDrive, Teams, and other M365 services, ensuring operational excellence and compliance.
• Identity & Access Security: Design, configure, and manage Windows Hello for Business deployments using Intune and Entra Connect to deliver secure authentication experiences.
• Microsoft Purview Data Protection: Configure and manage Azure Information Protection (AIP), Data Loss Prevention (DLP), Sensitivity Labels, and Information Governance policies to classify, label, and protect sensitive data.
• Compliance & Risk Management: Deploy and maintain Microsoft Purview features such as Insider Risk Management, Communication Compliance, and Audit to meet organizational and regulatory requirements.
• Microsoft Defender Suite: Configure and optimize Microsoft Defender for Office 365, Defender for Endpoint, and Defender for Cloud Apps for comprehensive threat detection and protection.
• CIS Benchmark Deployment: Apply CIS Benchmarks to Microsoft 365 and Windows environments to align with industry security standards.
• Conditional Access & Zero Trust: Design, implement, and troubleshoot Conditional Access policies, compliant device enforcement, and Zero Trust access models.
• Client Consultation & Training: Act as a subject matter expert, advising clients on Microsoft 365 security best practices, delivering workshops, and addressing security and compliance queries.

Preferred Skills & Qualifications:

• 7+ years of experience in Microsoft 365 Security, Identity, and Compliance.
• Proven expertise in Windows Hello for Business deployments with Intune and Entra Connect.
• Strong skills in Conditional Access, MFA, and the Microsoft Defender Suite.
• Hands‑on experience with AIP, DLP, Sensitivity Labels, and Insider Risk Management in Microsoft Purview.
• Familiarity with CIS Benchmarks and secure configuration practices.
• Strong problem‑solving and troubleshooting skills with the ability to work independently or collaboratively.
• Excellent communication skills, with the ability to present complex security and compliance concepts to both technical and non‑technical audiences.
• Relevant Microsoft Security certifications (SC‑100, SC‑200, SC‑300, and SC‑401) preferred.

At RSM, we offer a competitive benefits and compensation package for all our people.We offer flexibility in your schedule, empowering you to balance life's demands, while also maintaining your ability to serve clients.Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits.

All applicants will receive consideration for employment as RSM does not tolerate discrimination and/or harassment based on race; color; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender; sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the US uniformed service; US Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable federal, state or local law.

Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership.RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please call us at 800-274-3978 or send us an email at [e-mail].

RSM does not intend to hire entry level candidates who will require sponsorship now OR in the future (i.e. F-1 visa holders). If you are a recent U.S. college / university graduate possessing 1-2 years of progressive and relevant work experience in a same or similar role to the one for which you are applying, excluding internships, you may be eligible for hire as an experienced associate.

RSM will consider for employment qualified applicants with arrest or conviction records. For those living in California or applying to a position in California, please click here for additional information.

At RSM, an employee's pay at any point in their career is intended to reflect their experiences, performance, and skills for their current role. The salary range (or starting rate for interns and associates) for this role represents numerous factors considered in the hiring decisions including, but not limited to, education, skills, work experience, certifications, location, etc. As such, pay for the successful candidate(s) could fall anywhere within the stated range.

Compensation Range: $101,000 - $203,000

Individuals selected for this role will be eligible for a discretionary bonus based on firm and individual performance.