Cyber SDC- Purview and Defender Office Operations Lead Eng - Senior - Consulting

Cyber SDC
- Purview and Defender for Office Operations Lead Eng - Senior - Consulting - Location Open

Location:

Anywhere in Country

At EY, we’re all in to shape your future with confidence. We’re seeking a skilled and motivated Cybersecurity operations professional with a specialized skillset in data protection and email security to join our cybersecurity team. The ideal candidate will be responsible for the administration, management, troubleshooting, and continuous improvement of Microsoft Purview, Microsoft Defender for Office, and eShare platforms. This role requires a strong understanding of data protection, compliance, and email security best practices, and the ability to collaborate with cross‑functional teams to enhance our information protection posture.

In this operations role, the individual will troubleshoot real‑time issues from client stakeholders and end users on a daily basis.

• Platform Administration:
  Administer Microsoft Purview, Microsoft Defender for Office, and eShare, ensuring optimal performance and availability.
• Configure and manage security settings, policies, and policy exceptions within Microsoft Purview, Defender for Office, and eShare.
• Follow change‑management lifecycle for all configuration changes by testing in DEV and QA prior to promotion to Production, documenting change requests in Service Now.
• User Support:
  Respond to user incident tickets where a security tool has hindered performance, ensuring tickets are resolved per SLAs.
• Troubleshoot and identify root cause of user issues, implementing configuration changes if required, and keeping users informed throughout the process.
• Create and maintain user support documentation, including KB articles, known issue posts, and SharePoint informational materials.
• Collaboration and Communication:
  Work closely with supporting IT, security, and email teams to integrate Microsoft Purview, Defender for Office, and eShare with existing systems and workflows.
• Communicate effectively with stakeholders to report on operational status, escalations, blockers, and recommendations for improvement.
• Continuous Improvement:
  Monitor and report on data classification usage and data loss prevention (DLP) policy hits.
• Stay updated on the latest features, updates, and best practices related to Microsoft Purview, Defender for Office, and eShare.
• Identify opportunities for process improvements and automation within the operations of Microsoft Purview, Defender for Office, and eShare.
• Automate repetitive activities through scripting (Power Shell, Python) and automation (Tines, Power Automate, etc.).
• Documentation and Reporting:
  Maintain accurate documentation and SOPs of current configurations, processes, and procedures; generate reports on workstream performance and metrics for management review; keep an updated project plan on a weekly cadence and report to stakeholders and project management as timelines shift.
• Team Leadership:
  Work alongside an international team across multiple time zones; identify asks from client stakeholders and assign to team members based on interest, skillset, and bandwidth; track tasks to completion and provide updates to requesting stakeholders; provide technical support as an SMR on in‑scope technologies; and elevate issues and roadblocks to EY leadership as needed.

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 3+ years of proven experience in managing and supporting security and compliance solutions within Microsoft Purview and Microsoft Defender for Office.
• Excellent problem‑solving skills and attention to detail.
• Strong communication and interpersonal skills.
• Scripting experience, including Power Shell and Python.
• Automation experience, including Tines and Power Automate.
• Ticket and change‑management experience in Service Now.
• Experience leading an international team across multiple time zones.

• Experience or knowledge in eShare technologies.
• Experience with dashboarding and metrics, including Excel, Power
  
  BI, Splunk.
• Experience maintaining multiple security tenants, GCCH and Commercial versions.
• Relevant certifications (e.g.,…