M365 Security Specialist Full Time

Resource Solutions – GSC

Job Title: M365 Security Specialist

Company: FCA

Job Type: Permanent

Location: London/Leeds/Edinburgh (hybrid working – 40% in office per month)

Salary: Competitive

Opportunity Overview: A fantastic opportunity has arisen to join the Financial Conduct Authority (FCA), the only financial regulatory body in the UK which operates independently of the UK Government, as a Microsoft365 Specialist. The Cyber and Information Resilience (C&IR) department is headed by the Chief Information Security Officer (CISO) with direct reporting into the Chief Operating Officer (COO).

Role Objective: Purpose of this role will be to work closely with Cyber & Information Resilience, Information Specialists, and technology to build the capability within Office 365 Security and Compliance Centre for key stakeholders. An understanding of what ‘good’ looks like within the Microsoft Security and Compliance Centre is required to ensure the team can use core functionality of the Microsoft tools available. Build enhancements which will ensure MS Amlin corporate records are protected through regular compliance monitoring, alerting, and reporting.

Key Responsibilities:

• Demonstrate significant experience and understanding of O365 security and compliance centre, online governance, and best practice across O365 suite
• Demonstrate in depth experience of creation and implementation of sensitivity labelling and automating policies within O365
• Demonstrate significant knowledge and understanding of the Microsoft 365 product suite (SharePoint, Teams, one drive etc). This will include SharePoint Online concepts including compliance administration, apps, workflows, permissions, security, permissions and auditing, configuration, and customisation
• Responsible for ongoing information protection and Information Governance compliance configuration and monitoring within O365
• Provide experience and guidance on what can be delivered as core and enhanced capability of various components of Microsoft E5 licenses including Data Loss Protection, Threat Protection, Information Protection and Advanced Compliance.
• Ensure the security of the potentially sensitive archive records and enabling only the correct people the appropriate access to the records and information, in line with FCA policies and procedures.
• Working with a range of stakeholders to understand their compliance needs, including monitoring, alerting, and reporting, asking questions, and challenging if appropriate to deliver the best possible solution available.
• Working closely with our IT EUC team to define requirements for security reporting and tooling to be built and configured

Key Skills/Experience:

• Experience of delivering solutions in Microsoft 365 security tools, monitoring, alerting, and reporting.
• Ability to drive the compliance regime across the organisation.
• Working knowledge of Microsoft Security and Compliance core functionality, to deliver the best business solution to ensure compliance across the Microsoft Office Suite of products.
• Knowledge of other tools that could be used such as PowerBI and PowerShell Scripts to enhance the monitoring, alerting, and reporting within the Office 365 environment.
• Knowledge and experience on what can be delivered as core and enhanced capability of various components of Microsoft E5 licenses including Data Loss Protection, Threat Protection, Information Protection and Advanced Compliance.
• Working knowledge of information management and security concepts, objectives, and industry standards like NIST CSF, ISO15489, GDPR and ISO27001.
• Experience implementing policy modules for automation across industry standards including ISO27001 and GDPR.

If you are looking for something exciting or that next move in your career, then don’t hesitate to apply today!