M365 Risk Manager

M365 Risk Manager Job#: 3045741

Job Description:

Position Summary We are seeking an experienced Risk Manager to join our technology team and provide dedicated risk management oversight for Microsoft 365 applications and services. This role will serve as the primary point of contact for application risk governance, continuous monitoring activities, risk assessments, control reviews, and remediation tracking within a highly regulated financial services environment.

The ideal candidate will have a strong understanding of enterprise risk frameworks, technology controls, Microsoft 365 security and compliance capabilities, and experience managing technology-related risks. Candidates with prior banking technology experience and familiarity with internal risk management processes, governance programs, and risk tracking systems are highly preferred.

Key Responsibilities Manage application risk activities for Microsoft 365 platforms and related technologies.

Coordinate continuous monitoring activities and ensure compliance with enterprise risk standards.

Perform risk assessments, control reviews, gap analyses, and remediation tracking.

Partner with technology teams, application owners, information security teams, and risk organizations to identify and mitigate risks.

Facilitate risk reviews, issue management activities, and governance reporting.

Monitor and track risk findings through closure, ensuring appropriate documentation and stakeholder communication.

Support audit, regulatory, and compliance activities related to application controls and technology governance.

Evaluate security and compliance controls within Microsoft 365 environments.

Maintain documentation related to risk exceptions, control effectiveness, and remediation efforts.

Provide status updates to leadership regarding risk posture, open findings, and mitigation plans.

Work closely with internal governance teams to ensure adherence to evolving risk standards and policies.

Required Qualifications 5+ years of technology risk management, operational risk, cybersecurity risk, or application governance experience.

Experience performing risk assessments, issue management, control reviews, and continuous monitoring activities.

Strong understanding of technology risk frameworks and governance processes.

Experience with risk remediation tracking and risk lifecycle management.

Ability to communicate effectively with technical teams, risk partners, auditors, and senior leadership.

Experience supporting highly regulated enterprise environments.

Preferred Qualifications Familiarity with RISE and other internal risk tracking platforms.

Understanding of GIS risk processes and current risk governance standards.

Experience supporting Microsoft 365 technologies and security controls.

Knowledge of Microsoft Purview, Conditional Access Policies, Tenant Restrictions, Information Protection, Identity Governance, and related M365 security capabilities.

Experience working with audit, compliance, and regulatory review processes.

Technology Focus Areas Microsoft 365

Microsoft Purview Conditional Access Tenant Restrictions Identity and Access Management Information Protection Data Governance Compliance Controls Risk Monitoring and Reporting Security Governance Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package.

Our commitment to excellence is reflected in many awards, including Clearly Rateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the…