Security Consulting Practitioner
Job Description
We are seeking an experienced Security Consulting Practitioner to lead cybersecurity assessments, data security initiatives, and Microsoft Purview implementations across enterprise environments. The role will provide strategic security advisory, solution design, assessment, and project leadership, with a strong focus on data security, information protection, labeling, classification, and DLP.
Key Responsibilities
Lead cybersecurity and data security assessments, including current-state assessments, gap analysis, and future-state architecture.
Design and implement Microsoft Purview Information Protection, Information Labeling, Classification, and DLP solutions.
Apply security best practices and frameworks such as NIST CSF and CIS Controls, ensuring alignment with regulations including PDPA and GDPR.
Provide strategic advisory on data security, cloud security, governance, and Microsoft security technologies.
Stay current with Microsoft Purview capabilities, product roadmaps, and emerging data governance practices.
Develop security roadmaps and provide recommendations to strengthen clients' overall security posture.
Lead end-to-end security consulting engagements from proposal and assessment through implementation, testing, and post-go-live optimization.
Conduct client workshops, present technical recommendations, and deliver security awareness or technical training.
Translate complex cybersecurity concepts into clear business value, risks, and actionable recommendations.
Identify and manage project risks, issues, dependencies, and mitigation plans.
Provide technical leadership and mentor security professionals within consulting engagements.
Manage multiple projects and priorities while maintaining high standards of quality and client satisfaction.
Requirements
- Bachelor's or Master's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.
- 10+ years of IT and cybersecurity experience, including at least 5 years in data security, information protection/classification, security leadership, or client-facing consulting.
- Mandatory hands-on experience with Microsoft Purview and enterprise data security solutions.
- Strong experience designing and implementing complex cybersecurity and data protection solutions.
- Strong understanding of Information Protection, Data Classification, Labeling, DLP, and Data Governance.
- Experience with security assessments and developing strategic security recommendations.
- Strong knowledge of NIST CSF, CIS Controls, PDPA, and GDPR.
- Excellent presentation, documentation, communication, and stakeholder management skills.
- Proven ability to lead teams and manage multiple concurrent consulting engagements.
Certifications Highly Preferred:
Microsoft Certified: Cybersecurity Architect Expert
Microsoft Security, Compliance, and Identity Fundamentals
Microsoft Purview / Information Protection certifications
CISSP
CDPSE
Good to Have:
Microsoft SC-400
Microsoft SC-401
Other relevant Microsoft Security certifications