Microsoft 365 Risk & Compliance Lead

Apex Systems; Charlotte, Northern (NC, KY); Hybrid; USD 90,000 - 96,000; Full time

Benefits offered by this job

ESPP

401K

HSA

EAP

Training programs

Job summary

Everforth Apex Systems in Charlotte, NC is seeking an experienced M365 Risk Manager to provide governance, monitoring, risk assessments, and remediation tracking for Microsoft 365 environments in a highly regulated financial services setting.

You will partner with technology teams, information security, and risk partners to ensure controls are effective, drive governance reporting, and keep leadership informed of risk posture and open findings.

Qualifications

• 5+ years of technology risk management, operational risk, cybersecurity risk, or application governance experience.
• Experience performing risk assessments, issue management, control reviews, and continuous monitoring activities.
• Strong understanding of technology risk frameworks and governance processes.
• Experience supporting highly regulated enterprise environments.

Responsibilities

• Manage application risk activities for Microsoft 365 platforms and related technologies.
• Coordinate continuous monitoring activities and ensure compliance with enterprise risk standards.
• Perform risk assessments, control reviews, gap analyses, and remediation tracking.
• Partner with technology teams, application owners, information security teams, and risk organizations to identify and mitigate risks.
• Facilitate risk reviews, issue management activities, and governance reporting.

Skills

Technology risk management

Operational risk

Cybersecurity risk

Application governance

Risk remediation tracking

Communication with auditors

Tools

RISE

Microsoft Purview

Conditional Access

Tenant Restrictions

Information Protection

Job description

Everforth Apex Systems in Charlotte, NC is seeking an experienced M365 Risk Manager to provide governance, monitoring, risk assessments, and remediation tracking for Microsoft 365 environments in a highly regulated financial services setting.

You will partner with technology teams, information security, and risk partners to ensure controls are effective, drive governance reporting, and keep leadership informed of risk posture and open findings.