Lead Cyber Security Consultant – AI Security Controls (Power Platform & Copilot)

Positions

1. Lead Cyber Security Consultant – Workstream Lead
Responsible for leading the AI Security Controls workstream, driving client discussions, security architecture/control decisions, implementation, validation, and knowledge transfer.

2. Lead Cyber Security Consultant – Technical Support Lead
Responsible for hands-on security control configuration, testing, documentation, and supporting the workstream lead and client security/platform teams.

Job Summary

We are seeking experienced Cyber Security Consultants with 10+ years of experience to support an AI Security Operating Capability engagement.

The consultants will help the client establish the capability to review, approve, monitor, and secure AI use cases running on Microsoft Power Platform and Microsoft Copilot/Copilot Studio.

This is a highly hands-on technical role. Candidates must be capable of independently navigating Microsoft Power Platform, Copilot Studio, and associated Microsoft security technologies to identify, configure, test, and validate security controls.

Mandatory Skills – Pass/Fail

Candidates must have:

• 10+ years of Cyber Security experience, preferably in consulting, security architecture, or enterprise security engineering.

• Strong hands-on experience with Microsoft Copilot and Copilot Studio.

• Strong hands-on experience with Microsoft Power Platform, particularly:

  • Power Automate

  • Dataverse

  • Power Platform security and governance

• Strong experience with the Microsoft Security ecosystem, particularly:

  • Microsoft Entra / Entra ID

  • Microsoft Purview

  • Identity, access, data protection, and governance controls

• Strong understanding of how Entra and Purview integrate with Power Platform and Copilot environments.

• Experience with AI/ML security risk domains, AI governance, and security controls for enterprise AI use cases.

• Knowledge of Microsoft security benchmarks, baselines, and security best practices.

• Experience designing, implementing, configuring, and testing security controls.

• Experience developing security runbooks, control specifications, and technical documentation.

• Strong client-facing communication and presentation skills.

• Ability to conduct working sessions and provide effective knowledge transfer to security and platform teams.

• Relevant Microsoft and/or Cyber Security certifications are required.

Important: This is not a policy-only or advisory security role. Candidates must have demonstrated hands-on technical capability to configure and enable controls directly within Copilot Studio, Power Automate, Dataverse, Entra, Purview, and related Microsoft technologies.

Key Responsibilities

• Assess the client's existing security tooling and identify gaps against AI-specific security risk domains for Microsoft Power Platform and Copilot.

• Identify and prioritize security controls aligned with Microsoft security benchmarks, security baselines, and industry best practices.

• Design security controls for Power Platform, Copilot Studio, and connected enterprise AI use cases.

• Directly configure and enable security controls within:

  • Microsoft Copilot Studio

  • Power Automate

  • Dataverse

  • Microsoft Entra

  • Microsoft Purview

  • Related Microsoft security technologies

• Execute security control configuration, testing, validation, and evidence collection.

• Support AI use cases including:

  • AI chatbots / copilots

  • Email and workflow automation

  • Analytics and machine learning

  • Computer vision

• Document detailed security control specifications, including:

  • Control objective

  • Control description

  • Control owner

  • Implementation/configuration guidance

  • Evidence requirements

  • Testing and validation methodology

• Develop detailed operational runbooks and technical documentation.

• Overlay implemented security controls onto existing solution and security architecture documentation.

• Conduct security reviews and validation of Power Platform/Copilot implementations.

• Collaborate closely with client Cyber Security, IAM, Data Governance, AI, Cloud, and Power Platform teams.

• Deliver knowledge-transfer sessions so the client's security team can independently operate the controls and AI security intake/review process.

Preferred Certifications

Relevant certifications may include:

• Microsoft Certified: Cybersecurity Architect Expert

• Microsoft Certified: Security Operations Analyst

• Microsoft Certified: Identity and Access Administrator

• Microsoft Certified: Power Platform Solution Architect Expert

• Microsoft Certified: Power Platform Developer

• Microsoft Applied Skills / certifications related to Microsoft Copilot or Copilot Studio

• CISSP

• CISM

• CCSP or equivalent security certifications

Ideal Candidate

The ideal candidate is a senior hands-on Cyber Security Consultant/Architect who combines deep enterprise security expertise with practical experience securing Microsoft Power Platform and Copilot environments.

The candidate should be able to move beyond governance recommendations and independently identify, configure, test, validate, and document security controls across Copilot Studio, Power Automate, Dataverse, Entra, and Purview while confidently working with client security leadership and technical teams.