Microsoft 365 Copilot Readiness & Security Lead

About the Project

Our client needs a short‑term (2+ months) expert to lead Microsoft 365 Copilot readiness and security work, focusing on AI Copilot, Microsoft Purview, and data labeling. The rollout of Copilot lacked thorough backend planning, settings, and policies, so the project will assess the current security posture, identify configuration options, and implement needed controls.

Location

Remote (U.S.) – the consultant must travel to the client’s Houston office on day 1; travel expenses will be covered.

Key Responsibilities

• Conduct a Microsoft 365 Copilot readiness assessment and explain data‑exposure paths (Graph grounding, permissions‑driven access) for IT, security, and audit audiences.
• Perform data‑exposure and oversharing risk analysis across SharePoint, OneDrive, Teams, Exchange, and Microsoft 365 Groups (including broken inheritance, legacy links, and guest‑access patterns).
• Design and execute SharePoint/OneDrive/Teams governance and remediation campaigns, covering permissions, sharing policies, external collaboration controls, site‑lifecycle governance, and permission‑cleanup.
• Implement Microsoft Purview compliance guardrails: configure Sensitivity Labels, DLP, Retention, and Audit practices aligned with Copilot rollout and data classification.
• Review Entra ID (Azure AD) identity and access controls, including Conditional Access, MFA posture, device compliance, and guest/external access governance that affect Copilot usage.
• Define security guardrails and policy design for Copilot (acceptable use, sensitive‑data handling, prompt guidance) and map each control to the risk it mitigates.
• Create a pragmatic decision framework (Enable / Disable / Defer) with prerequisites, sequencing, business impact, and technical dependencies.
• Build an operating model for monitoring, compliance operations, and incident workflows: signal monitoring, cadence, escalation paths, evidence capture, and RACI assignments.
• Produce audit‑ready documentation packages, including configuration “what/where/why,” control narratives, evidence checklists, runbooks, screenshots/log‑retention plans, and executive‑ready readouts.
• Deliver executive and technical readouts/workshops to administrators, security/compliance teams, and business stakeholders, translating technical controls into risk and decision language.

Required Skillset

• Expertise in Microsoft 365 Copilot readiness assessments.
• Ability to evaluate tenant readiness and clearly explain Copilot data‑exposure paths.
• Proven experience identifying and prioritizing oversharing risks across M365 services.
• Deep knowledge of SharePoint, OneDrive, and Teams governance, permissions, and remediation.
• Hands‑on experience designing and configuring Microsoft Purview (Sensitivity Labels, DLP, Retention, Audit).
• Strong capabilities with Entra ID (Azure AD) Conditional Access, MFA, device compliance, and external‑access governance.
• Skill in defining security guardrails, acceptable‑use policies, and risk‑mitigation mappings for Copilot.
• Experience creating decision matrices (Enable/Disable/Defer) with clear business impact analysis.
• Ability to build monitoring, compliance, and incident‑response operating models.
• Proficiency in producing audit‑ready documentation, evidence packages, and executive summaries.
• Comfortable presenting to both technical and non‑technical audiences.

About ManpowerGroup

ManpowerGroup® (NYSE: MAN) is a leading global workforce‑solutions company that helps organizations transform in a fast‑changing world of work. Through its brands—Manpower, Experis, Talent Solutions, and Jefferson Wells—it delivers innovative talent solutions to hundreds of thousands of organizations across more than 75 countries. Recognized for diversity, inclusion, and ethical leadership, ManpowerGroup has been named one of the World’s Most Ethical Companies for 13 consecutive years.