Senior M365 Security & Compliance Architect with AI

Bank of America; Charlotte (NC); On-site; USD 150,000 - 210,000; Full time

Job summary

Bank of America is seeking a Senior M365 Platform Security Architect to define the target-state of security and governance for Microsoft 365 services across the enterprise. This role collaborates with security, legal, privacy, and engineering teams to embed secure-by-design controls and Zero Trust principles.

You will lead multi-year roadmaps for Purview, Information Protection, Defender, Power Platform, Copilot and related services, translating roadmap changes into architecture decisions and

Responsibilities

• Own the target-state architecture and multi-year roadmap for Microsoft Purview, Microsoft Information Protection, Microsoft Defender, Power Platform, Microsoft 365 Copilot, Copilot Studio, and their dependencies.
• Define reference architectures, service boundaries, integration models, configuration standards, reusable patterns, and architecture guardrails for information protection, compliance, threat protection, low-code automation, agents, and generative AI.
• Lead architecture reviews and provide hands-on design direction for data classification, sensitivity labeling, encryption, retention, records management, DLP, eDiscovery, auditing, insider risk, compliance monitoring, and data security posture management.
• Define the architecture for Microsoft Defender capabilities, including security signal integration, threat detection and response, exposure management, incident workflows, telemetry, and alignment with enterprise security operations.
• Establish enterprise architecture and guardrails for Power Apps and Power Automate, including environment strategy, connectors, data policies, identity, application ownership, ALM, monitoring, support models, and lifecycle controls.
• Define the governed foundation for Microsoft 365 Copilot and Copilot Studio agents, including data readiness, grounding sources, agent identity and permissions, connectors, monitoring, auditability, and responsible AI controls.
• Partner with Information Security, Data Management, Risk, Compliance, Legal, Privacy, Records Management, Engineering, and Operations to embed Zero Trust, least privilege, separation of duties, policy enforcement, evidence capture, and secure-by-design controls.
• Identify and reduce risks from oversharing, excessive permissions, unmanaged applications and agents, inappropriate connector use, sensitive-data exposure, policy gaps, control fragmentation, technology obsolescence, and third-party dependencies.
• Evaluate roadmap changes and licensing implications for Microsoft and AI security capabilities and translate them into architecture decisions.

Skills

Architectural leadership

Stakeholder collaboration

Threat protection

Data classification

Encryption

Compliance monitoring

Zero Trust

Security governance

Tools

Microsoft Purview

Microsoft Information Protection

Microsoft Defender

Power Platform

Microsoft 365 Copilot

Copilot Studio

Job description

Bank of America is seeking a Senior M365 Platform Security Architect to define the target-state of security and governance for Microsoft 365 services across the enterprise. This role collaborates with security, legal, privacy, and engineering teams to embed secure-by-design controls and Zero Trust principles.

You will lead multi-year roadmaps for Purview, Information Protection, Defender, Power Platform, Copilot and related services, translating roadmap changes into architecture decisions and