Microsoft 365 InfoSec Lead — Data Protection & Insider Risk

Brown Brothers Harriman & Co.; Jersey City (NJ); On-site; USD 110,000 - 160,000; Full time

Job summary

Brown Brothers Harriman (BBH) in New Jersey is seeking a senior Microsoft 365 Information Security Engineer to lead the design, deployment, and operation of enterprise security across Microsoft 365, including Purview, Data Loss Prevention, Insider Risk, and governance.

This technical leader will build data protection programs, implement insider risk controls, design Zero Trust architectures, and govern access across Microsoft 365, Azure, and emerging AI features, partnering with stakeholders to

Qualifications

• 5+ years implementing Microsoft 365 security and compliance solutions.
• Hands-on experience with Purview, Entra ID, and 365 Security & Compliance tools.
• Experience designing Zero Trust security architectures and data governance.

Responsibilities

• Lead design and deployment of Purview solutions incl. Information Protection, DLP, Insider Risk, eDiscovery, Records Management, and DSPM.
• Develop and enforce governance, labeling, encryption and compliance strategies.
• Design and administer identity and access controls leveraging Entra ID, CA, PIM, RBAC, ABAC, MFA, and Zero Trust.
• Establish governance for Copilot and AI platforms to prevent data leakage and ensure compliance.
• Conduct risk assessments, health checks, architecture reviews and remediation across M365.
• Partner with stakeholders to develop policies and operational procedures aligned with risk management objectives.

Skills

Microsoft Purview

Entra ID

Data protection

Zero Trust

Insider Risk Management

DLP

Education

Bachelor’s degree in Information Security / IT / CS

Tools

Microsoft 365 Security & Compliance tools

Azure

Job description

Brown Brothers Harriman (BBH) in New Jersey is seeking a senior Microsoft 365 Information Security Engineer to lead the design, deployment, and operation of enterprise security across Microsoft 365, including Purview, Data Loss Prevention, Insider Risk, and governance.

This technical leader will build data protection programs, implement insider risk controls, design Zero Trust architectures, and govern access across Microsoft 365, Azure, and emerging AI features, partnering with stakeholders to