M365 Risk Engineer

M365 Risk Mitigation Engineer
24 Month Contract Charlotte, NCW2 ONLYJob Description This contract role focuses on identifying, evaluating, and mitigating technology risks across enterprise productivity platforms, with a primary emphasis on Microsoft 365, Exchange, SharePoint, and related security and monitoring tools. You will own first-line risk outcomes from initial identification through evidence-based closure, ensuring that residual risk, control effectiveness, dependencies, and remediation status are clearly understood and communicated.

The position blends hands-on engineering with strong risk-management judgment to design and validate controls, drive remediation, and strengthen the security, compliance, and resilience of critical productivity services.

Responsibilities Manage technology risk mitigation engineering across the Productivity Engineering portfolio, with a focus on Microsoft 365 and related platforms.

Perform comprehensive technology risk assessments and prioritize remediation activities based on business impact, risk exposure, and operational dependencies.

Develop and execute remediation strategies that address root causes, reduce residual risk, and prevent recurrence of issues.

Evaluate and validate the effectiveness of security, operational, and recovery controls across productivity, collaboration, messaging, and information-protection services.

Lead or help lead the implementation of engineering solutions that improve security, regulatory compliance, and operational resilience for M365, Exchange, SharePoint, and associated systems.

Govern and support issue management, including tracking, remediation planning, exception processes, and risk acceptance activities.

Establish and maintain risk monitoring, reporting, and metrics, as well as executive governance frameworks that provide clear visibility into risk posture and remediation progress.

Support internal and external audits, regulatory reviews, risk committees, and control examinations through evidence-based validation and thorough documentation.

Strengthen platform resilience, recovery readiness, and technology lifecycle management for Microsoft 365, email, SharePoint, and related infrastructure.

Act as a technical authority for operational risk decisions, providing guidance on control design, remediation options, and risk trade-offs.

Interpret and analyze logs, alerts, configurations, technical designs, test results, architecture diagrams, vendor advisories, and security findings to identify and remediate risks.

Coordinate with engineering, security, compliance, data, user experience, architecture, operations, and risk governance partners to ensure aligned and timely risk mitigation.

Drive remediation from initial risk identification through validated closure, ensuring that corrective actions are implemented, tested, and documented.

Support the design and execution of remediation architecture and production changes in a controlled and auditable manner.

Utilize Splunk and other monitoring tools to perform search, analytics, monitoring, and risk reporting for productivity platforms.

Contribute to automation and data-quality improvements that enhance risk monitoring, evidence collection, and systems-of-record discipline.

Manage technology vendors where required and drive vendor-dependent remediation to completion.

Allocate efforts across core areas such as M365/infrastructure engineering, technology risk and compliance, and stakeholder/audit management to ensure balanced and effective coverage.

Essential Skills At least 7 years of relevant experience in enterprise technology engineering, infrastructure, operations, cybersecurity, technology risk, or a closely related discipline.

At least 5 years of hands-on experience supporting…