Jobs · Massachusetts

Cyber - Data Protection Microsoft Architect - Senior - Consulting

EY · Boston, MA · 1 mo ago
Hybrid$126k–$210k/yrFull-time
We need to output only HTML fragment, with headings

for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Use
  • for any list of duties/requirements/benefits, and

    for prose. Do NOT repeat job title as heading. Do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short

    or drop it. Preserve ALL substantive information; do NOT invent or summarize away detail. Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. IMPORTANT: include a section ONLY when the posting has real, specific content for it — never emit a heading followed by filler/placeholder text (e.g. "commensurate with experience", "not specified", "N/A", "varies", "TBD") and never create Pay/Schedule/Benefits sections unless the posting actually states them. Prefer a few substantive sections over many thin ones. We need to parse the posting. Key content: - Location: Anywhere in Country (maybe not needed) - At EY, we’re all in to shape your future with confidence... (intro) - The Opportunity: description of role. - Your Key Responsibilities: list of bullet points. - Skills And Attributes For Success: list of bullet points. - To qualify for the role, you must have: list of bullet points. - Ideally, you’ll also have Microsoft certifications... (list) - Experience with ... (list) - Ability to develop PowerPoint presentations... (list) - Proficiency with consulting engagement methods... (list) - Experience mentoring junior resources... (list) - What We Look For: paragraph. - What We Offer You At EY: description of benefits, salary ranges, total rewards package. - Then application instructions etc (to be removed). - Then EEO etc (to be removed). We need to decide sections. We have: - About the role: could be the introductory paragraph(s) describing EY and the opportunity. Could be "About the role" or "Opportunity". The instruction says use

    for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can choose which sections to include based on content. We have responsibilities (Your Key Responsibilities) -> Responsibilities section. We have Skills And Attributes For Success -> Skills section. We have qualifications: "To qualify for the role, you must have:" -> Requirements or Qualifications? The list includes education, experience, etc. Could be Requirements. Also there is "Ideally, you’ll also have..." which could be Qualifications (preferred). We could combine into Requirements and Qualifications sections. But we need to avoid thin sections. Perhaps combine qualifications into Requirements. We have "What We Look For" -> could be Skills? Already have Skills. Could be a separate section like "About the role"? But we already have About the role maybe. We have "What We Offer You At EY" -> includes salary range and benefits. So we can have Benefits and Pay sections. The posting gives salary ranges for different locations, and mentions Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options. So we have specific benefits and pay. Schedule: not mentioned. So we should NOT include Schedule section. Thus sections: About the role (intro), Responsibilities, Requirements (maybe combine qualifications), Skills, Benefits, Pay. We need to ensure we don't create sections with filler. All have content. We need to preserve all substantive information, not invent or summarize away detail. So we need to include all bullet points from responsibilities, skills, qualifications, etc. Also the intro paragraphs. We need to format lists using
    • . For prose, use

      . We need to avoid duplication. There may be duplicated lines (like some bullet points repeated? Not sure). We'll need to check. Let's extract the content. First, intro: "Location: Anywhere in Country At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. The Opportunity In a rapidly changing technology, data, privacy, and cybersecurity landscape, clients across industries look to us for trusted guidance on protecting information, enabling responsible data use, and managing risk. As a Senior within the Data Protection and Privacy team, you will serve as a junior Microsoft architect with primary expertise in Microsoft Purview and broader working knowledge across the Microsoft Security stack. You will help clients translate business, legal, privacy, regulatory, and security requirements into practical architecture, governance, and implementation approaches. This role is designed for a senior-level consulting professional who can lead defined workstreams, facilitate client discussions, produce high-quality solution designs, and guide implementation teams while continuing to develop toward a lead architect role. You will work across data protection, privacy, security, identity, endpoint, cloud, analytics, and AI governance stakeholders in complex enterprise environments." We can combine into a few paragraphs. Now Responsibilities: "Your Key Responsibilities As a Senior on the Data Protection and Privacy team, your key responsibilities would include:" then bullet list. Let's extract bullet points: - Lead defined Microsoft Purview workstreams, including discovery, requirements gathering, design, configuration guidance, testing, deployment planning, and operational transition. - Design and support Microsoft Purview capabilities such as Information Protection, sensitivity labeling, Data Loss Prevention, Data Lifecycle Management, Records Management, Insider Risk Management, Communication Compliance, eDiscovery, Audit, Data Map, Data Catalog, and Data Security Posture Management. - Develop data classification, information protection, retention, DLP, insider risk, and data governance strategies that align to business objectives and legal, privacy, regulatory, and security requirements. - Support security and privacy assessments, architecture reviews, maturity assessments, control gap analyses, roadmaps, operating models, and governance frameworks. - Facilitate client workshops and stakeholder interviews across security, privacy, legal, compliance, records, data governance, technology, and business teams. - Translate business and control requirements into solution architectures, design decisions, implementation backlogs, user stories, test scenarios, and measurable outcomes. - Create clear architecture diagrams, reference patterns, configuration standards, decision papers, executive presentations, and technical implementation guidance. - Support integration of Microsoft Purview with Microsoft Defender, Intune, Sentinel, Entra, Azure, Fabric, Microsoft 365, and related data and security services. - Contribute to data security and AI governance initiatives, including protection of sensitive data used by Microsoft 365 Copilot, generative AI solutions, analytics platforms, and enterprise applications. - Provide technical direction to implementation resources, review deliverables for quality, identify risks and dependencies, and escalate design decisions when appropriate. - Mentor junior team members, contribute reusable assets and delivery methods, and support proposal development and solution shaping for Data Protection and Privacy opportunities. - Maintain awareness of Microsoft product developments, industry standards, privacy requirements, and emerging data security and AI risks. Now Skills And Attributes For Success: "To thrive in this role, you will need a blend of consulting, architecture, technical, and business skills, together with the judgment to operate independently within a defined scope and seek senior architect guidance when appropriate." Then bullet list: - Strong knowledge of data protection, information governance, privacy, compliance, and security concepts. - Practical experience designing or implementing Microsoft Purview capabilities in an enterprise environment. - Ability to connect technical platform features to business, legal, privacy, regulatory, and operational outcomes. - Ability to lead discovery sessions, workshops, design discussions, demonstrations, and working sessions with technical and non-technical stakeholders. - Ability to create high-quality client deliverables, reports, roadmaps, presentations, architecture diagrams, and implementation guidance. - Strong analytical and problem-solving skills, including the ability to evaluate options, document tradeoffs, and make well-supported recommendations. - Ability to recognize and escalate risks, issues, dependencies, and opportunities to appropriate client and team leadership. - Ability to work collaboratively in culturally diverse, cross-functional, and geographically dispersed teams. - Commitment to service quality, project management disciplines, documentation standards, and continuous learning. Now qualifications: "To qualify for the role, you must have:" then bullet list: - A bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Systems, Data Science, Privacy, or a related field, or equivalent relevant experience. - Approximately 3-6 years of relevant experience in cybersecurity, data protection, privacy, compliance, cloud security, information governance, or related technology consulting. - Hands-on experience with Microsoft Purview, with depth in two or more areas such as Information Protection, Data Loss Prevention, Data Lifecycle Management, Records Management, Insider Risk Management, eDiscovery, Audit, Data Map, Data Catalog, or Data Security Posture Management. - Experience gathering requirements and translating them into architecture, solution design, configuration, testing, deployment, and operating model considerations. - Working knowledge of at least two additional Microsoft technologies, such as Microsoft Defender, Intune, Sentinel, Entra, Azure security services, Fabric, or Microsoft 365. - Ability to communicate effectively through client conversations, workshops, interviews, written deliverables, presentations, and technical documentation. - Experience supporting projects in large or complex enterprise environments with multiple business, legal, privacy, security, data, and technology stakeholders. - Understanding of security and privacy frameworks or regulations such as NIST, ISO 27001, CIS Controls, GDPR, CCPA/CPRA, HIPAA, or other applicable requirements. - Ability to travel as required by client and engagement needs. Then "Ideally, you’ll also have Microsoft certifications such as SC-400, SC-401, SC-100, SC-200, AZ-500, MS-102, or a demonstrated plan to obtain relevant certifications." Then list of experience items: - Experience with Microsoft Defender for Cloud Apps, Defender for Endpoint, Defender XDR, Intune, Sentinel, Entra ID, Azure Policy, Azure security services, or Microsoft Fabric. - Experience with data discovery, classification, catalog, privacy management, DLP, DSPM, cloud security, SIEM, identity, or endpoint security technologies outside the Microsoft ecosystem. - Experience developing data protection, privacy, AI governance, Zero Trust, cloud security, or enterprise security architecture deliverables. - Experience integrating Microsoft technologies with ticketing, data governance, analytics, cloud, or third-party security platforms. - Ability to develop PowerPoint presentations and Visio or equivalent architecture diagrams that communicate complex topics to executive, business, and technical audiences. - Proficiency with consulting engagement methods, work planning, estimation, status reporting, risk management, and quality review. - Experience mentoring junior resources and coordinating work across technical and functional teams. These could be considered additional qualifications or preferred qualifications. We could put them under Qualifications (preferred) or maybe under Skills? But they are more like qualifications/experience. Since we already have Skills section for skills/attributes, we could put these under Qualifications (preferred). However we need to avoid too many thin sections. Perhaps combine all qualification-like content into a single Requirements section (must have) and a Qualifications section (preferred). But we need to decide if we should split. The instruction: "Prefer a few substantive sections over many thin ones." So maybe we can have: About the role, Responsibilities, Requirements (must have), Qualifications (preferred), Skills, Benefits, Pay. That's 6 sections. Could be okay. But we need to ensure each section has substantive content. All have. Now Benefits: The posting says: "In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options." Also earlier: "What We Offer You At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers." That's more generic. The specific benefits are medical/dental, pension/

Similar jobs