EY
Cyber SDC- Purview and Defender for Office Operations Lead Eng - Senior - Consul
EY, Minneapolis, Minnesota, United States, 55400
Cyber SDC- Purview and Defender for Office Operations Lead Eng - Senior - Consulting
Location: Anywhere in Country
We’re seeking a skilled and motivated cybersecurity operations professional, with a specialized skill set in data protection and email security, to join our cybersecurity team. The ideal candidate will be responsible for the administration, management, troubleshooting, and continuous improvement of Microsoft Purview, Microsoft Defender for Office, and eShare platforms. This role requires a strong understanding of data protection, compliance, and email security best practices, and the ability to work collaboratively with cross‑functional teams to enhance our information protection posture. In this operations role, the individual will troubleshoot real‑time issues from client stakeholders and end users on a daily basis.
Key Responsibilities
Platform Administration: Administer Microsoft Purview, Microsoft Defender for Office, and eShare, ensuring optimal performance and availability.
Configure and manage security settings, policies, and policy exceptions within Microsoft Purview, Defender for Office, and eShare.
Follow change‑management lifecycle for all configuration changes by testing in DEV and QA prior to promoting to production through documenting change requests in ServiceNow.
User Support: Respond to user incident tickets where a security tool has hindered performance (e.g., send email, receive email, copy to USB). Resolve tickets per SLAs, troubleshoot root causes, implement configuration changes if required, keep users informed, and communicate with stakeholders.
Create and maintain user support documentation, including KB articles, known‑issue posts, and SharePoint informational materials.
Collaboration and Communication: Work closely with supporting IT, security, and email teams to integrate Microsoft Purview, Defender for Office, and eShare with existing systems and workflows; communicate effectively with stakeholders to report operational status, escalations, blockers, and recommendations.
Continuous Improvement: Monitor and report on data classification usage and DLP policy hits; stay updated on latest features; identify opportunities for process improvements and automation (via PowerShell, Python, Tines, PowerAutomate, etc.); maintain accurate documentation and SOPs.
Documentation and Reporting: Generate reports on workstream performance and metrics for management review; maintain project plan weekly and report to stakeholders and project management on timelines.
Team Leadership: Work alongside an international team across multiple time zones; assign tasks based on interest and skill; provide technical support; elevate issues to EY leadership as needed.
Qualifications
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Three or more years of experience managing and supporting security and compliance solutions within Microsoft Purview and Microsoft Defender for Office.
Excellent problem‑solving skills and attention to detail.
Strong communication and interpersonal skills.
Experience with PowerShell, Python, and other scripting languages.
Automation experience with Tines, PowerAutomate, or similar tools.
Ticket and change‑management experience in ServiceNow.
Experience leading an international team across multiple time zones.
Preferred Skills
Experience or knowledge in eShare technologies.
Dashboarding and metrics experience (Excel, PowerBI, Splunk, etc.).
Experience maintaining multiple security tenants, GCCH and Commercial versions.
Relevant certifications such as Microsoft Certified: Security, Compliance, & Identity Fundamentals, Microsoft Certified: Azure Security Engineer Associate, CISSP, or CIPT.
Work Environment This position may require occasional after‑hours support and on‑call availability. The role is a collaborative team environment focused on overall security and compliance posture.
Compensation & Benefits
Base salary ranges: $77,500–$140,900 in all geographic locations; $92,900–$160,500 for NYC Metro Area, Washington State, and California (excluding Sacramento).
Medical and dental coverage, pension and 401(k) plans, and a wide range of paid time‑off options.
Hybrid work model: 40–60% in‑person for external client teams.
Flexible vacation policy based on personal circumstances; paid holidays and other leaves of absence available.
EY accepts applications for this position on an ongoing basis.
EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law. EY is committed to providing reasonable accommodation to qualified individuals with disabilities.
#J-18808-Ljbffr
We’re seeking a skilled and motivated cybersecurity operations professional, with a specialized skill set in data protection and email security, to join our cybersecurity team. The ideal candidate will be responsible for the administration, management, troubleshooting, and continuous improvement of Microsoft Purview, Microsoft Defender for Office, and eShare platforms. This role requires a strong understanding of data protection, compliance, and email security best practices, and the ability to work collaboratively with cross‑functional teams to enhance our information protection posture. In this operations role, the individual will troubleshoot real‑time issues from client stakeholders and end users on a daily basis.
Key Responsibilities
Platform Administration: Administer Microsoft Purview, Microsoft Defender for Office, and eShare, ensuring optimal performance and availability.
Configure and manage security settings, policies, and policy exceptions within Microsoft Purview, Defender for Office, and eShare.
Follow change‑management lifecycle for all configuration changes by testing in DEV and QA prior to promoting to production through documenting change requests in ServiceNow.
User Support: Respond to user incident tickets where a security tool has hindered performance (e.g., send email, receive email, copy to USB). Resolve tickets per SLAs, troubleshoot root causes, implement configuration changes if required, keep users informed, and communicate with stakeholders.
Create and maintain user support documentation, including KB articles, known‑issue posts, and SharePoint informational materials.
Collaboration and Communication: Work closely with supporting IT, security, and email teams to integrate Microsoft Purview, Defender for Office, and eShare with existing systems and workflows; communicate effectively with stakeholders to report operational status, escalations, blockers, and recommendations.
Continuous Improvement: Monitor and report on data classification usage and DLP policy hits; stay updated on latest features; identify opportunities for process improvements and automation (via PowerShell, Python, Tines, PowerAutomate, etc.); maintain accurate documentation and SOPs.
Documentation and Reporting: Generate reports on workstream performance and metrics for management review; maintain project plan weekly and report to stakeholders and project management on timelines.
Team Leadership: Work alongside an international team across multiple time zones; assign tasks based on interest and skill; provide technical support; elevate issues to EY leadership as needed.
Qualifications
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Three or more years of experience managing and supporting security and compliance solutions within Microsoft Purview and Microsoft Defender for Office.
Excellent problem‑solving skills and attention to detail.
Strong communication and interpersonal skills.
Experience with PowerShell, Python, and other scripting languages.
Automation experience with Tines, PowerAutomate, or similar tools.
Ticket and change‑management experience in ServiceNow.
Experience leading an international team across multiple time zones.
Preferred Skills
Experience or knowledge in eShare technologies.
Dashboarding and metrics experience (Excel, PowerBI, Splunk, etc.).
Experience maintaining multiple security tenants, GCCH and Commercial versions.
Relevant certifications such as Microsoft Certified: Security, Compliance, & Identity Fundamentals, Microsoft Certified: Azure Security Engineer Associate, CISSP, or CIPT.
Work Environment This position may require occasional after‑hours support and on‑call availability. The role is a collaborative team environment focused on overall security and compliance posture.
Compensation & Benefits
Base salary ranges: $77,500–$140,900 in all geographic locations; $92,900–$160,500 for NYC Metro Area, Washington State, and California (excluding Sacramento).
Medical and dental coverage, pension and 401(k) plans, and a wide range of paid time‑off options.
Hybrid work model: 40–60% in‑person for external client teams.
Flexible vacation policy based on personal circumstances; paid holidays and other leaves of absence available.
EY accepts applications for this position on an ongoing basis.
EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law. EY is committed to providing reasonable accommodation to qualified individuals with disabilities.
#J-18808-Ljbffr