Cyber SDC- Purview and Defender Office Operations Lead Eng - Senior - Consulting

Cyber SDC
- Purview and Defender for Office Operations Lead Eng - Senior - Consulting - Location Open

Join EY as a senior Cybersecurity Engineer to lead operations on Microsoft Purview, Microsoft Defender for Office, and eShare platforms.

Location:

Anywhere in Country

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

We are seeking a skilled and motivated Cybersecurity operations professional, with a specialized skillset in data protection and email security, to join our cybersecurity team. The ideal candidate will be responsible for the administration, management, troubleshooting, and continuous improvement of Microsoft Purview, Microsoft Defender for Office, and eShare platforms. This role requires a strong understanding of data protection, compliance, and email security best practices, along with the ability to work collaboratively with cross-functional teams to enhance our information protection posture.

In this operations role, the individual will be responsible for troubleshooting real-time issues from client stakeholders and end users on a daily basis.

• Platform Administration: Administer Microsoft Purview, Microsoft Defender for Office, and eShare, ensuring optimal performance and availability.
• Configure and manage security settings, policies, and policy exceptions within Microsoft Purview, Defender for Office, and eShare.
• Follow change management life cycle for all configuration changes by testing in DEV and QA prior to promoting to Production through documenting change requests in Service Now.
• User Support: Respond to user incident tickets where a security tool has hindered their ability to perform a task (e.g., send email, receive email, copy to USB). Resolve tickets per SLAs and troubleshoot root cause, implementing configuration changes if required. Keep users informed and escalated to client stakeholders as needed.
• Create and maintain user support documentation, including KB articles, known issue posts, and SharePoint informational materials.
• Collaboration and Communication: Work closely with supporting IT, security, and email teams to integrate Microsoft Purview, Defender for Office, and eShare with existing systems and workflows. Communicate effectively with stakeholders to report on operational status, escalations, blockers, and recommendations for improvement.
• Continuous Improvement: Monitor and report on data classification usage and data loss prevention (DLP) policy hits; stay updated on the latest features, updates, and best practices. Identify opportunities for process improvements and automation within operations, automating repetitive activities through scripting (Power Shell, Python) and automation tools (Tines, Power Automate).
• Documentation and Reporting: Maintain accurate documentation and SOPs for current configurations, processes, and procedures. Generate reports on workstream performance and metrics for management review. Keep an updated project plan on a weekly cadence and report to stakeholders and project management as timelines shift or are delayed.
• Team Leadership: Work alongside an international team across multiple time zones. Assign tasks to team members based on skill set and bandwidth, track tasks to completion, and provide updates to stakeholders. Provide technical support as an SMR on in-scope technologies. Escalate issues and roadblocks to EY leadership as needed.

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 3+ years of proven experience managing and supporting security and compliance solutions within Microsoft Purview and Microsoft Defender for Office.
• Excellent problem‑solving skills and attention to detail.
• Strong communication and interpersonal skills.
• Scripting experience, including Power Shell, Python.
• Automation experience, including Tines, Power Automate.
• Ticket and change management experience in Service Now.
• Experience leading an international team across multiple time zones.

• Expe…