Copilot AI Security Consultant

Job Title:

Job Description

M/F/D

Copilot AI Security Consultant

Top Skills:

• Cloud Security Architecture (Microsoft Ecosystem)
  • Expertise in Purview, Entra ID, Defender for Cloud Apps, Azure Policy, and M365 security configurations.
  • Ability to design secure identity and access management for Copilot AI.
  • Ability to build a framework for data security focused on Copilot AI usage.

• Copilot AI Governance Framework Design
  • Skill in crafting governance models that addresses policy, access control, data protection, and risk management for generative AI tools like Copilot and Azure AI Foundry.
• Compliance & Regulatory Alignment
  • Understanding of GDPR, NIST AI Risk Management Framework, and privacy-by-design principles.
• Microsoft Purview & Fabric Mastery
  • Hands-on experience with data classification, labeling, DLP, and auditing using Microsoft Purview and Fabric to enforce data boundaries and prevent leakage.
• Consulting & Executive Communication
  • Ability to lead workshops, simplify complex technical topics, and present strategic recommendations to IT and business stakeholders.
• Incident Response & Monitoring Strategy
  • Designing proactive monitoring, auditing, and prompt injection, and data exfiltration scenarios.
• Responsible AI & Risk Management
  • Familiarity with model risk management, acceptable-use policies, and ethical AI deployment strategies.
• Program Delivery & Stakeholder Engagement
• Experience in building RACI models, risk registers, and aligning AI programs with business goals and customer commitments.

Key Responsibilities

• Lead customer workshops to assess Copilot AI readiness from identity, data, and compliance perspectives.
• Define and articulate Copilot AI governance frameworks covering policy, access, data protection, and risk management.
• Translate complex Microsoft security and compliance capabilities (Entra ID, Purview, Defender, M365, Azure AI) into actionable recommendations.
• Advise on the secure enablement of generative AI tools such as Microsoft Copilot, Copilot Studio, and Azure AI Foundry
• Design pragmatic approaches for data boundary enforcement, labeling, DLP, and prompt-safety controls.
• Review identity and access management for Copilot Workloads—MFA, Conditional Access, privileged identity controls, and just-in-time elevation.
• Recommend monitoring, auditing, and incident-response strategies for Copilot AI misuse or data leakage.
• Present findings and next steps to IT Management stakeholders with clear business and compliance implications.

Required Qualifications

• 5-10 years cloud security, compliance, or architecture, ideally in Enterprise Microsoft environments.
• Proven experience advising enterprise customers on secure adoption of M365 & Copilot AI workloads (Copilot, Copilot Chat, Copilot Studio, AI Foundry).
• Hands-on knowledge of security, governance & management on Microsoft Purview, Microsoft Fabric, AI Foundry, Microsoft 365 Administration
• Working hands-on knowledge of security, governance & management on Microsoft Entra, Defender for Cloud Apps, Azure Policy
• Strong ability to lead short, outcome-driven consulting engagements and communicate with executives.
• Excellent written and verbal communication skills, capable of simplifying complex security & governance topics.

Preferred experience

• Previous consulting or customer-facing experience at a major Microsoft partner.
• Familiarity with AI governance frameworks, model risk management, and data-driven decisioning.
• Working knowledge of Azure AI, AI Foundry, Microsoft Fabric security and compliance configurations.
• Experience in building RACI models, acceptable-use policies, or risk registers for AI or cloud platforms.
• Exposure to FinOps or cost optimization in Microsoft 365 and Azure environments
• Understanding of responsible AI principles, privacy by design, and regulatory alignment (GDPR, ISO, NIST).
• Prior experience with response plans for AI misuse
• Understanding of ISO/IEC 42001

Preferred Certifications

• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Information Protection Administrator (SC-401)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Bonus: Microsoft Certified: Azure AI Engineer Associate (AI-102) or equivalent

Upskilling:

• Data labeling, DLP and deeper Purview/Fabric

Location:

Language Requirements:

Time Type: