M365 Security and Compliance Architect

• Own the end-to-end implementation, hardening, and governance of Microsoft 365 E5 across Pay10 India , aligning to RBI requirements and relevant local regulations. Establish Zero-Trust controls, identity governance (PIM/PAM), information protection, and audit-ready compliance operations.

Key Responsibilities

• Architecture & Rollout

• Design the M365 E5 security architecture (Identity, Access, Devices, Data, Threat, Governance).
• ImplementEntra ID P2,PIM/PAM,Conditional Access,MFA,SSPR,Break-glassstrategy.
• DeployDefender for Office 365, Defender for Endpoint, Defender for Cloud Apps (CASB/MCAS).
• ImplementPurview: Information Protection (MIP sensitivity labels),DLP,Records/Retention.
• Intune device compliance, baselines, and app protection policies (Windows, macOS, iOS/Android).

• Compliance & Audit

• Map M365 controls toRBI IT Framework, DPDP Act 2023, ISO 27001, PCI-DSS
• ConfigureCompliance Managerscorecards, assessments, evidence, and audit artifacts.
• Definedata classification, legal holds, retention schedules, and cross-border data handling.

• Operations & Governance

• Build SOPs/runbooks: joiner-mover-leaver, incident response, PIM approvals, break-glass drills.
• Establishmonitoring & reporting(KQL, Power BI, Graph API) for compliance and security posture.
• Conduct KT to internal admins; lead CAB/ISMS change processes; drive continuous improvement.

• Stakeholder & Vendor Management

• Collaborate with customers finalized vendor(s) for network security alignment and integrations.
• Manage regional rollouts; coordinate with legal/compliance for evidence packs and audits.

Required Experience:

• 4-5+ years hands-on withM365 E5security & compliance at enterprise scale.
• Deep expertise inEntra ID P2 (PIM/PAM), Conditional Access, Defender suite, Purview (MIP/DLP/eDiscovery), Intune.
• Proven delivery inregulated financial services(banks/NBFC/fintech/payments).
• Strong understanding ofRBI,DPDP 2023,ISO 27001,PCI-DSS