Copilot AI Security Consultant (m/f/d)

Job Title: Copilot AI Security Consultant (m/f/d)

Job Description

Copilot AI Security Consultant Top Skills: Cloud Security Architecture (Microsoft Ecosystem)Expertise in Purview, Entra ID, Defender for Cloud Apps, Azure Policy, and M365 security configurations. Ability to design secure identity and access management for Copilot AI. Ability to build a framework for data security focused on Copilot AI usage. Copilot AI Governance Framework DesignSkill in crafting governance models that addresses policy, access control, data protection, and risk management for generative AI tools like Copilot and Azure AI Foundry. Compliance & Regulatory AlignmentUnderstanding of GDPR, NIST AI Risk Management Framework, and privacy-by-design principles. Microsoft Purview & Fabric MasteryHands-on experience with data classification, labeling, DLP, and auditing using Microsoft Purview and Fabric to enforce data boundaries and prevent leakage. Consulting & Executive CommunicationAbility to lead workshops, simplify complex technical topics, and present strategic recommendations to IT and business stakeholders. Incident Response & Monitoring StrategyDesigning proactive monitoring, auditing, and prompt injection, and data exfiltration scenarios. Responsible AI & Risk ManagementFamiliarity with model risk management, acceptable-use policies, and ethical AI deployment strategies. Program Delivery & Stakeholder Engagement Experience in building RACI models, risk registers, and aligning AI programs with business goals and customer commitments.

Key Responsibilities

Lead customer workshops to assess Copilot AI readiness from identity, data, and compliance perspectives. Define and articulate Copilot AI governance frameworks covering policy, access, data protection, and risk management. Translate complex Microsoft security and compliance capabilities (Entra ID, Purview, Defender, M365, Azure AI) into actionable recommendations. Advise on the secure enablement of generative AI tools such as Microsoft Copilot, Copilot Studio, and Azure AI Foundry Design pragmatic approaches for data boundary enforcement, labeling, DLP, and prompt-safety controls. Review identity and access management for Copilot Workloads—MFA, Conditional Access, privileged identity controls, and just-in-time elevation. Recommend monitoring, auditing, and incident-response strategies for Copilot AI misuse or data leakage. Present findings and next steps to IT Management stakeholders with clear business and compliance implications. Required Qualifications 5-10 years cloud security, compliance, or architecture, ideally in Enterprise Microsoft environments. Proven experience advising enterprise customers on secure adoption of M365 & Copilot AI workloads (Copilot, Copilot Chat, Copilot Studio, AI Foundry). Hands-on knowledge of security, governance & management on Microsoft Purview, Microsoft Fabric, AI Foundry, Microsoft 365 Administration Working hands-on knowledge of security, governance & management on Microsoft Entra, Defender for Cloud Apps, Azure Policy Strong ability to lead short, outcome-driven consulting engagements and communicate with executives. Excellent written and verbal communication skills, capable of simplifying complex security & governance topics. Preferred experience Previous consulting or customer-facing experience at a major Microsoft partner. Familiarity with AI governance frameworks, model risk management, and data-driven decisioning. Working knowledge of Azure AI, AI Foundry, Microsoft Fabric security and compliance configurations. Experience in building RACI models, acceptable-use policies, or risk registers for AI or cloud platforms. Exposure to FinOps or cost optimization in Microsoft 365 and Azure environments Understanding of responsible AI principles, privacy by design, and regulatory alignment (GDPR, ISO, NIST). Prior experience with response plans for AI misuse Understanding of ISO/IEC 42001 Preferred Certifications Microsoft Certified: Cybersecurity Architect Expert (SC-100) Microsoft Certified: Information Protection Administrator (SC-401) Microsoft Certified: Azure Security Engineer Associate (AZ-500) Bonus: Microsoft Certified: Azure AI Engineer Associate (AI-102) or equivalent Upskilling: Data labeling, DLP and deeper Purview/Fabric Location: DEU Work-at-Home Language Requirements: Time Type: Full time