Jobs · Missouri

Cyber - Data Protection Microsoft Architect - Senior - Consulting

EY · Kansas City, MO · 1 mo ago
Hybrid$126k–$210k/yrFull-time
We need to output HTML fragment with sections: About the role? The posting includes location line, then intro paragraphs. We need to use

for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must include sections only when posting has real specific content. We have content for About the role (intro paragraphs). Responsibilities (Your Key Responsibilities). Requirements? There's "To qualify for the role, you must have:" which is qualifications. Also "Skills And Attributes For Success" is skills. Also "What We Look For" maybe part of skills? Could treat as Skills. Also "What We Offer You" includes benefits and pay. Pay is given with salary ranges. Benefits: medical and dental coverage, pension and 401(k) plans, paid time off. Schedule not given. So we should not include Schedule section. We need to avoid repeating job title as heading. No Job ID. Remove boilerplate: EEO, legal, application instructions, etc. Also remove duplicated lines. We need to preserve all substantive info. We need to output only HTML fragment, no /, no markdown fences. Let's craft sections:

About the role

with paragraphs: location line? The location line "Location: Anywhere in Country" maybe not needed? It's metadata; we can fold into short

. The intro paragraphs: "At EY, we’re all in to shape your future with confidence..." etc. Also "The Opportunity ..." paragraph. We'll combine.

Responsibilities

with
  • list each bullet from "Your Key Responsibilities". Need to preserve each bullet as list item. The bullet list is a long sentence with semicolons? Actually each responsibility separated by period? The text: "Lead defined Microsoft Purview workstreams, including discovery, requirements gathering, design, configuration guidance, testing, deployment planning, and operational transition.Design and support Microsoft Purview capabilities such as Information Protection, sensitivity labeling, Data Loss Prevention, Data Lifecycle Management, Records Management, Insider Risk Management, Communication Compliance, eDiscovery, Audit, Data Map, Data Catalog, and Data Security Posture Management.Develop data classification, information protection, retention, DLP, insider risk, and data governance strategies that align to business objectives and legal, privacy, regulatory, and security requirements.Support security and privacy assessments, architecture reviews, maturity assessments, control gap analyses, roadmaps, operating models, and governance frameworks.Facilitate client workshops and stakeholder interviews across security, privacy, legal, compliance, records, data governance, technology, and business teams.Translate business and control requirements into solution architectures, design decisions, implementation backlogs, user stories, test scenarios, and measurable outcomes.Create clear architecture diagrams, reference patterns, configuration standards, decision papers, executive presentations, and technical implementation guidance.Support integration of Microsoft Purview with Microsoft Defender, Intune, Sentinel, Entra, Azure, Fabric, Microsoft 365, and related data and security services.Contribute to data security and AI governance initiatives, including protection of sensitive data used by Microsoft 365 Copilot, generative AI solutions, analytics platforms, and enterprise applications.Provide technical direction to implementation resources, review deliverables for quality, identify risks and dependencies, and escalate design decisions when appropriate.Mentor junior team members, contribute reusable assets and delivery methods, and support proposal development and solution shaping for Data Protection and Privacy opportunities.Maintain awareness of Microsoft product developments, industry standards, privacy requirements, and emerging data security and AI risks." We need to split into separate list items. Probably each sentence before a capital letter after a period? We'll split by periods that are followed by a space and capital letter. Let's manually list: 1. Lead defined Microsoft Purview workstreams, including discovery, requirements gathering, design, configuration guidance, testing, deployment planning, and operational transition. 2. Design and support Microsoft Purview capabilities such as Information Protection, sensitivity labeling, Data Loss Prevention, Data Lifecycle Management, Records Management, Insider Risk Management, Communication Compliance, eDiscovery, Audit, Data Map, Data Catalog, and Data Security Posture Management. 3. Develop data classification, information protection, retention, DLP, insider risk, and data governance strategies that align to business objectives and legal, privacy, regulatory, and security requirements. 4. Support security and privacy assessments, architecture reviews, maturity assessments, control gap analyses, roadmaps, operating models, and governance frameworks. 5. Facilitate client workshops and stakeholder interviews across security, privacy, legal, compliance, records, data governance, technology, and business teams. 6. Translate business and control requirements into solution architectures, design decisions, implementation backlogs, user stories, test scenarios, and measurable outcomes. 7. Create clear architecture diagrams, reference patterns, configuration standards, decision papers, executive presentations, and technical implementation guidance. 8. Support integration of Microsoft Purview with Microsoft Defender, Intune, Sentinel, Entra, Azure, Fabric, Microsoft 365, and related data and security services. 9. Contribute to data security and AI governance initiatives, including protection of sensitive data used by Microsoft 365 Copilot, generative AI solutions, analytics platforms, and enterprise applications. 10. Provide technical direction to implementation resources, review deliverables for quality, identify risks and dependencies, and escalate design decisions when appropriate. 11. Mentor junior team members, contribute reusable assets and delivery methods, and support proposal development and solution shaping for Data Protection and Privacy opportunities. 12. Maintain awareness of Microsoft product developments, industry standards, privacy requirements, and emerging data security and AI risks. That seems fine.

    Requirements

    maybe we treat "To qualify for the role, you must have:" as qualifications. Could also have a separate Requirements section? The posting has "To qualify for the role, you must have:" then bullet list. We'll put that under Requirements or Qualifications. The instruction says we can use headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to decide which to use. We have both qualifications and skills. We'll use Requirements for the mandatory qualifications, and Skills for the skills and attributes. Thus:

    Requirements

    with
    • list each bullet from "To qualify for the role, you must have:" plus maybe also the "Ideally, you'll also have..."? That's optional; could be part of Skills. We'll keep required items only. List items: - A bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Systems, Data Science, Privacy, or a related field, or equivalent relevant experience. - Approximately 3-6 years of relevant experience in cybersecurity, data protection, privacy, compliance, cloud security, information governance, or related technology consulting. - Hands-on experience with Microsoft Purview, with depth in two or more areas such as Information Protection, Data Loss Prevention, Data Lifecycle Management, Records Management, Insider Risk Management, eDiscovery, Audit, Data Map, Data Catalog, or Data Security Posture Management. - Experience gathering requirements and translating them into architecture, solution design, configuration, testing, deployment, and operating model considerations. - Working knowledge of at least two additional Microsoft technologies, such as Microsoft Defender, Intune, Sentinel, Entra, Azure security services, Fabric, or Microsoft 365. - Ability to communicate effectively through client conversations, workshops, interviews, written deliverables, presentations, and technical documentation. - Experience supporting projects in large or complex enterprise environments with multiple business, legal, privacy, security, data, and technology stakeholders. - Understanding of security and privacy frameworks or regulations such as NIST, ISO 27001, CIS Controls, GDPR, CCPA/CPRA, HIPAA, or other applicable requirements. - Ability to travel as required by client and engagement needs. We could also include the "Ideally, you'll also have..." as part of Skills. Now

      Skills

      with list from "Skills And Attributes For Success" plus maybe "What We Look For" and "Ideally, you'll also have..." etc. Let's extract Skills And Attributes For Success bullet list (the paragraph after that heading). It's a paragraph with sentences separated by periods. We'll split into list items. Text: "Strong knowledge of data protection, information governance, privacy, compliance, and security concepts. Practical experience designing or implementing Microsoft Purview capabilities in an enterprise environment. Ability to connect technical platform features to business, legal, privacy, regulatory, and operational outcomes. Ability to lead discovery sessions, workshops, design discussions, demonstrations, and working sessions with technical and non-technical stakeholders. Ability to create high-quality client deliverables, reports, roadmaps, presentations, architecture diagrams, and implementation guidance. Strong analytical and problem-solving skills, including the ability to evaluate options, document tradeoffs, and make well-supported recommendations. Ability to recognize and escalate risks, issues, dependencies, and opportunities to appropriate client and team leadership. Ability to work collaboratively in culturally diverse, cross-functional, and geographically dispersed teams. Commitment to service quality, project management disciplines, documentation standards, and continuous learning." We'll make each a list item. Then "What We Look For" paragraph: "We seek collaborative, curious, and accountable professionals who are passionate about data protection and privacy and who can balance strategic thinking with hands-on delivery. The ideal candidate has meaningful Microsoft Purview experience, a broad foundation across the Microsoft Security stack, and the judgment to lead defined solution areas while partnering with more senior architects on complex or enterprise-wide decisions. Success in this role requires strong client presence, clear communication, technical learning agility, attention to quality, and a commitment to helping clients protect data while enabling responsible business and AI innovation." We can add as list items or maybe as prose. Since it's more descriptive, we could keep as

      under Skills section. But instruction: Use

      • for any list of duties/requirements/benefits, and

        for prose. So we can keep the Skills And Attributes as list, and the "What We Look For" as prose (

        ) maybe still under Skills section. Or we could create a separate section? Not needed. Also "Ideally, you'll also have Microsoft certifications such as SC-400, SC-401, SC-100, SC-200, AZ-500, MS-102, or a demonstrated plan to obtain relevant certifications." plus other items after that: Experience with Microsoft Defender for Cloud Apps, etc. Those are also under Skills? They appear after the "Ideally, you'll also have..." paragraph. They are more like desired experience. We'll include them as list items under Skills. Let's capture all those: - Microsoft certifications such as SC-400, SC-401, SC-100, SC-200, AZ-500, MS-102, or a demonstrated plan to obtain relevant certifications. - Experience with Microsoft Defender for Cloud Apps, Defender for Endpoint, Defender XDR, Intune, Sentinel, Entra ID, Azure Policy, Azure security services, or Microsoft Fabric. - Experience with data discovery, classification, catalog, privacy management, DLP, DSPM, cloud security, SIEM, identity, or endpoint security technologies outside the Microsoft ecosystem. - Experience developing data protection, privacy, AI governance, Zero Trust, cloud security, or enterprise security architecture deliverables. - Experience integrating Microsoft technologies with ticketing, data governance, analytics, cloud, or third-party security platforms. - Ability to develop PowerPoint presentations and Visio or equivalent architecture diagrams that communicate complex topics to executive, business, and technical audiences. - Proficiency with consulting engagement methods, work planning, estimation, status reporting, risk management, and quality review. - Experience mentoring junior resources and coordinating work across technical and functional teams. We'll add these as list items. Now Benefits and Pay. Benefits: "In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options." We'll make a Benefits section with

Similar jobs