[Hiring] Microsoft 365 Security and Compliance Specialist @Public Sector Resourcing

Role Description

We're looking for an experienced Microsoft 365 Security & Compliance Specialist to help strengthen and enhance Companies House's Microsoft 365 security capabilities. You'll play a key role in the implementation and optimisation of Microsoft Purview, Microsoft Defender and Microsoft Entra ID, helping to protect organisational data, improve compliance controls and support the delivery of a secure and resilient digital environment.

• Design, implement, and administer Microsoft 365 security and compliance solutions.
• Lead the deployment and optimisation of Microsoft Purview, Microsoft Defender, and Microsoft Entra security capabilities.
• Develop and maintain policies relating to information protection, data governance, retention, Data Loss Prevention (DLP) and secure collaboration.
• Support security and compliance investigations, providing technical analysis, evidence gathering, and recommendations for remediation.
• Assess existing security controls and identify opportunities to strengthen the Microsoft 365 security posture, resilience and compliance capabilities.
• Provide specialist advice and risk-based recommendations to technical teams, project stakeholders, and business leaders.
• Produce technical documentation, standards, procedures, and implementation guidance.
• Support audit, assurance, and compliance activities against frameworks including ISO27001, GDPR, Cyber Essentials, GovS 007, and GovS 013.
• Work closely with cyber security, architecture, data protection, governance, digital delivery, and supplier teams to embed security-by-design principles.
• Promote security and compliance best practices, providing guidance and recommendations to technical and business stakeholders.

Qualifications

• Strong experience administering and implementing Microsoft 365 Security and Compliance solutions.
• Hands-on experience with Microsoft Purview, Microsoft Defender, and Microsoft Entra ID.
• Expertise in Information Protection, Data Loss Prevention (DLP), data classification, and retention policies.
• Experience supporting security investigations, incident response, and compliance activities.
• Knowledge of security governance, risk management, and regulatory compliance requirements.
• Experience creating technical documentation, standards, and operational procedures.
• Strong stakeholder engagement and communication skills.
• Ability to translate technical security concepts into practical business recommendations.

Requirements

• SC Clearance is an essential requirement for this role; you must be willing & eligible to undergo checks.
• This role can only be worked within the UK and not Overseas.

Benefits

• Disability Confident employer encouraging applications from disabled and neurodivergent candidates.
• Prioritised review for candidates who identify as having a disability and meet the essential criteria for the role.
• Armed Forces Commitment welcoming applications from veterans, service leavers, reservists and military spouses or partners.