EY Cyber SDC- Purview Defender Office Operations 

United States, Texas, Dallas 

62310156

Key Responsibilities:

1. Platform Administration:

1. Administer Microsoft Purview, Microsoft Defender for Office, and eShare, ensuring optimal performance and availability of the platforms.

1. Configure and manage security settings, policies, and policy exceptions within Microsoft Purview, Defender for Office, and eShare.

1. Follow change management life cycle for all configuration changes by testing in DEV and QA prior to promoting to Production through documenting change requests in ServiceNow.

1. User Support:

1. Respond to user incident tickets where a security tool has hindered their ability to perform a task (e.g., send email, receive email, copy to USB). Ensure tickets are resolved per SLAs.

1. Troubleshoot and identify root cause of user’s issue, implementing configuration change if required. Keep user informed through process with updates. Escalate to client stakeholders as required.

1. Create and maintain user support documentation, including KB articles, known issue posts, and SharePoint informational materials.

1. Collaboration and Communication:

1. Work closely with supporting IT, security, and email teams to integrate Microsoft Purview, Defender for Office, and eShare with existing systems and workflows.

1. Communicate effectively with stakeholders to report on operational status, escalations, blockers, and recommendations for improvement.

1. Continuous Improvement:

1. Monitor and report on data classification usage and data loss prevention (DLP) policy hits.

1. Stay updated on the latest features, updates, and best practices related to Microsoft Purview, Defender for Office, and eShare.

1. Identify opportunities for process improvements and automation within the operations of Microsoft Purview, Defender for Office, and eShare.

1. Automate repetitive activities through scripting (PowerShell, Python) and automation (Tines, PowerAutomate, etc.)

1. Documentation and Reporting:

1. Maintain accurate documentation and SOPs (Standard Operating Procedures) of current configurations, processes, and procedures related to Microsoft Purview, Defender for Office, and eShare operations.

1. Generate reports on workstream performance and metrics for management review.

1. Keep an updated project plan on a weekly cadence and report to stakeholders and project management as timelines shift or are delayed.

1. Team Leadership

1. Work alongside an international team across multiple time zones.

1. Identify asks from client stakeholders and assign to team members based on interest, skillset, and bandwidth. Track tasks to completion and provide updates to requesting stakeholders.

1. Provide team with technical support as an SMR on in-scope technologies.

1. Escalate issues and roadblocks to EY leadership as needed.

Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

• 3+ years of proven experience in managing and supporting security and compliance solutions within Microsoft Purview and Microsoft Defender for Office.

• Excellent problem-solving skills and attention to detail.

• Strong communication and interpersonal skills.

• Scripting experience, including PowerShell, Python, etc.

• Automation experience, including Tines, PowerAutomate, etc.

• Ticket and change management experience in ServiceNow.

• Experience with leading an international team across multiple time zones.

Preferred Skills:

• Experience or knowledge in eShare technologies.

• Experience with dashboarding and metrics, including through Excel, PowerBI, Splunk, etc.

• Experience maintaining multiple security tenants, GCCH and Commercial versions.

• Relevant certifications (e.g., Microsoft Certified: Security, Compliance, and Identity Fundamentals, Microsoft Certified: Azure Security Engineer Associate, CISSP, CIPT)

Work Environment:

This position may require occasional after-hours support and on-call availability. The Microsoft Purview and Defender for Office Operations Engineer will work in a collaborative team environment, contributing to the overall security and compliance posture of the organization.