Job description

At BBH, Partnership is more than a form of ownership—it’s our approach to business and relationships. We know that supporting your professional and personal goals is the best way to help our clients and advance our business. We take that responsibility seriously. With a 200-year legacy and a shared passion for what’s next, this is the right place to build a fulfilling career. Senior Microsoft 365 Information Security Engineer – Data Protection & Insider Risk Position Summary We are seeking a senior-level Microsoft 365 Information Security Engineer with deep expertise in Microsoft Purview, Data Protection, Insider Risk Management, Identity Security, and Governance to lead the design, implementation, and operation of enterprise security and compliance solutions across Microsoft 365. This role serves as a technical leader and subject matter expert responsible for protecting sensitive information, reducing cyber risk, and enabling secure collaboration through Microsoft’s security ecosystem, including Purview, Entra ID, Sentinel, and Security Copilot. The ideal candidate will have extensive experience building and managing enterprise data protection programs, implementing insider risk controls, designing Zero Trust security architectures, and governing access to corporate data across Microsoft 365, Azure, and emerging AI technologies such as Microsoft 365 Copilot. Key Responsibilities Lead the design and deployment of Microsoft Purview solutions including Information Protection, Data Loss Prevention (DLP), Insider Risk Management, eDiscovery, Records Management, and Data Security Posture Management (DSPM). Develop and enforce enterprise data governance, classification, labeling, encryption, and compliance strategies. Design and administer identity and access management controls leveraging Entra ID, Conditional Access, Privileged Identity Management (PIM), RBAC, ABAC, MFA, and Zero Trust frameworks. Establish governance controls for Microsoft 365 Copilot and other AI platforms to prevent data leakage and ensure regulatory compliance. Conduct security assessments, health checks, architecture reviews, and security remediation efforts across Microsoft 365 environments. Partner with business stakeholders and security teams to develop policies, standards, and operational procedures that align with enterprise risk management objectives. Provide technical leadership, mentorship, and strategic guidance on Microsoft security and compliance best practices. Required Qualifications 5 years of experience implementing and managing Microsoft 365 security and compliance solutions. Strong hands-on expertise with Microsoft Purview, Entra ID, and Microsoft 365 Security & Compliance technologies. Proven experience with data classification, sensitivity labeling, DLP, Insider Risk Management, identity governance, and access management. Experience designing and implementing Zero Trust security architectures. Deep understanding of enterprise cloud security, compliance frameworks, and risk mitigation strategies. Preferred Qualifications Microsoft certifications such as SC-100, SC-300, SC-400, SC-200, and AZ-305. Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field. Salary Range NJ: $110,000 - $160,000 base salary annual target bonus BBH and its affiliates compensation program includes base salary, discretionary bonuses, and profit-sharing. The anticipated base salary range(s) shown above are only for the indicated location(s) and may differ in other locations due to cost of living and labor considerations. Base salaries may vary based on factors such as skill, experience and qualification for the role. BBH s total rewards package recognizes your contributions with more than just a paycheck—providing you with benefits that enhance your experience at BBH from long-term savings, healthcare, and income protection to professional development opportunities and time off, our programs support your overall well-being. We value diverse experiences. We value diverse experiences and transferrable skillsets. If your career hasn’t followed a traditional path, includes alternative experiences, or doesn’t meet every qualification or skill listed in the job description, please do go ahead and apply. About BBH: Brown Brothers Harriman (BBH) is a premier global financial services firm, known for premium service, specialist expertise, technology solutions and partnership approach to client management. Across Investor Services and Capital Partners, we work with an enviable roster of sophisticated clients who make BBH their first call when they are tackling their hardest challenges. Delivering for our clients and each other energizes us. We believe that how we do our work is just as important as what we do. We are relentless problem solvers who know our best ideas come from collective debate and development—so we are never possessive about our ideas. Every day we come together as a diverse community of smart and caring people to deliver exceptional service and expert advice—creating success that lasts. No matter where you sit in the organization, everyone is empowered to contribute their ideas. BBHers can pick up the phone and call any colleague, and they are happy to help. Expanding your impact beyond your daily role is part of how we operate as trusted partners to one another. We believe stability is a competitive advantage, but being stable means having the knowledge, skill, and discipline to evolve, often—pushing the boundaries of innovation. As a private partnership, every investment we make is in the relationships, technologies, products and development we believe are in the long-term interests of our clients and our people. Our long-tenured leaders are experts in their areas and are actively involved in the day-to day business, taking the time to provide guidance and mentoring to build the next generation of BBHers. Because we know, our success begins with yours. Go to BBH.com to learn more about our rewards and benefits , philanthropy , approach to sustainability or how we support you to thrive personally, physically and financially . We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, age, genetic information, creed, marital status, sexual orientation, gender identity, disability status, protected veteran status, or any other protected status under federal, state or local law.

Requirements

Must-haves

Senior Microsoft 365 Information Security Engineer – Data Protection & Insider Risk
Develop and enforce enterprise data governance, classification, labeling, encryption, and compliance strategies.
Design and administer identity and access management controls leveraging Entra ID, Conditional Access, Privileged Identity Management (PIM), RBAC, ABAC, MFA, and Zero Trust frameworks.
Establish governance controls for Microsoft 365 Copilot and other AI platforms to prevent data leakage and ensure regulatory compliance.
Conduct security assessments, health checks, architecture reviews, and security remediation efforts across Microsoft 365 environments.
Partner with business stakeholders and security teams to develop policies, standards, and operational procedures that align with enterprise risk management objectives.
Provide technical leadership, mentorship, and strategic guidance on Microsoft security and compliance best practices.
5 years of experience implementing and managing Microsoft 365 security and compliance solutions.
Strong hands-on expertise with Microsoft Purview, Entra ID, and Microsoft 365 Security & Compliance technologies.
Proven experience with data classification, sensitivity labeling, DLP, Insider Risk Management, identity governance, and access management.
Experience designing and implementing Zero Trust security architectures.
Deep understanding of enterprise cloud security, compliance frameworks, and risk mitigation strategies.

Nice-to-haves

Microsoft certifications such as SC-100, SC-300, SC-400, SC-200, and AZ-305.
Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field.
NJ: $110,000 - $160,000 base salary annual target bonus

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azureaigo

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Professional Development