M365 Risk & Compliance Engineer

TEKsystems; United States; Hybrid; USD 69,000 - 90,000; Full time

Job summary

TEKsystems is seeking a Contract Technology Risk Engineer to manage risk mitigation across Productivity Engineering, perform risk assessments, and develop remediation strategies to reduce residual risk. You will evaluate controls, support audits, and help govern risk processes to strengthen resilience and lifecycle management.

The role requires strong communication, vendor management, and hands-on experience with Microsoft 365 and related security tools.

Qualifications

• 7+ years in enterprise technology engineering or related field.
• 5+ years supporting productivity, collaboration, or information-protection services.
• Bachelor's degree in computer science, information systems, cybersecurity, engineering, or equivalent practical experience.
• Experience with vulnerability management, secure configuration, lifecycle management, patching, change control, incident/problem management, and production validation.
• Experience supporting audits, regulatory examinations, risk committees, and formal issue‑management processes.
• Experience managing technology vendors and driving vendor-dependent remediation.
• Demonstrated experience owning technology risks and driving remediation from identification through validated closure.
• Demonstrated experience conducting risk assessments, evaluating control design, testing operating effectiveness, documenting evidence, and determining residual risk.
• Hands‑on experience with Microsoft 365 and meaningful experience with at least three of the following:
• Exchange Server Subscription Edition or enterprise Exchange hybrid environments
• SharePoint Server Subscription Edition or hybrid SharePoint environments
• Splunk Enterprise or Splunk Enterprise Security
• Email hygiene, routing, authentication, anti‑spam, or anti‑malware platforms
• Microsoft Defender for Office 365 or comparable threat‑management platforms
• Microsoft Purview, data loss prevention, information protection, or audit capabilities
• Ability to interpret logs, alerts, configurations, technical designs, test results, architecture diagrams, vendor advisories, and security findings.

Responsibilities

• Manage risk mitigation engineering across Productivity Engineering portfolio.
• Perform risk assessments and prioritize remediation activities based on business impact and risk exposure.
• Develop and execute remediation strategies that address root causes and reduce residual risk.
• Evaluate and validate the effectiveness of security, operational, and recovery controls.
• Help lead implementation of engineering solutions that improve security, compliance, and operational resilience.
• Help govern issue management, exception processes, and risk acceptance activities.
• Establish risk monitoring, reporting, metrics, and executive governance frameworks.
• Support audits, regulatory reviews, and control examinations through evidence-based validation.
• Strengthen platform resilience, recovery readiness, and technology lifecycle management.
• Collaborate with vendors on remediation.

Skills

Risk management

Security engineering

Vulnerability management

Audit support

Vendor management

Microsoft 365

Splunk

Log analysis

Risk assessments

Change management

Education

Bachelor's degree in CS/IS/Cybersecurity or equivalent

Tools

Exchange Server

SharePoint Server

Splunk Enterprise

Microsoft Defender 365

Microsoft Purview

Email security platforms

Job description

TEKsystems is seeking a Contract Technology Risk Engineer to manage risk mitigation across Productivity Engineering, perform risk assessments, and develop remediation strategies to reduce residual risk. You will evaluate controls, support audits, and help govern risk processes to strengthen resilience and lifecycle management.

The role requires strong communication, vendor management, and hands-on experience with Microsoft 365 and related security tools.