Business Technology Lead

Beacon Intelligence delivers data and insights that help R&D scientists develop better pharmaceuticals, faster than ever before. Our focus is simple: we curate high-accuracy data enriched and transformed with AI. This is delivered through a range of platforms, increasingly via AI-native products and features that enable customers to extract insights faster than ever before. This is a rare opportunity to make a meaningful impact on patients’ lives worldwide.

About the Role

As a Business Technology Lead, you will play a central role in delivering and evolving the organisation's technology capabilities, ensuring business systems, infrastructure, security, and digital platforms effectively support strategic and operational goals. This is not a traditional infrastructure support role. You will work closely with business stakeholders, product teams, vendors, and technical colleagues to transform business requirements into scalable, secure, and efficient technology solutions. Combining strong technical expertise with a deep understanding of business processes, you will drive technology innovation, application integration, cloud adoption, automation, and service improvement initiatives that enhance productivity, strengthen security, and enable organisational growth.

Responsibilities

Microsoft 365 Security & Compliance

• Lead the administration, governance, and continual improvement of the Microsoft 365 security platform, including Microsoft Defender, Microsoft Purview, Compliance Centre, and Entra ID (Azure AD).
• Develop, implement, and maintain security policies, standards, and controls to protect corporate information assets and ensure regulatory compliance including annual re-certification of Cyber Essentials Plus.
• Manage Data Loss Prevention (DLP), Information Protection, Conditional Access, Identity Protection, and Information Governance capabilities. Follow a pre-defined and documented security incident response plan and process to investigate incidents, minimise organisational impact, communicate effectively with relevant stakeholders, and drive robust remedial actions to prevent recurrence.
• Conduct regular security reviews, risk assessments, and compliance audits across the Microsoft 365 estate.
• Own the management and governance of Entra ID (Azure AD), Active Directory, authentication services, and identity lifecycle processes.
• Implement and maintain secure access controls, Multi-Factor Authentication (MFA), Privileged Identity Management (PIM), and Zero Trust principles.
• Manage and secure the organisation's endpoint estate using Microsoft Intune, Mobile Device Management (MDM), and Mobile Application Management (MAM).
• Oversee endpoint and system patching, configuration hardening, and vulnerability remediation activities to reduce security risk and maintain a secure, compliant technology environment.
• Support the management, governance, and optimisation of Microsoft Azure and Microsoft 365 environments.
• Provide governance and oversight of CAB and change control processes, ensuring all changes are appropriately documented, authorised, communicated, and underpinned by robust rollback procedures.

Cloud Applications

• Drive the adoption of Azure Cloud Security Posture Management (CSPM) practices and the Azure Well-Architected Framework, ensuring cloud services are secure, resilient, operationally efficient, cost-effective, and aligned to business and compliance requirements.
• Lead the security and governance of enterprise applications and cloud platforms, ensuring secure access, data protection, compliance, and risk management.
• Develop and maintain controls for Shadow IT and Shadow AI, ensuring unauthorised applications, services, and AI tools are identified, assessed, and governed in line with organisational security and compliance requirements.
• Drive the organisation's AI strategy, policy, and governance framework, balancing innovation and productivity gains with appropriate controls to safeguard data, privacy, security, regulatory compliance, and intellectual property.
• Manage application security controls, identity integration, SSO, MFA, privileged access, and third-party security assessments.
• Monitor and enhance the security posture of Microsoft 365, Azure, Salesforce, and other business-critical SaaS platforms.
• Collaborate with application owners and vendors to implement secure-by-design solutions and remediate security risks.

Security Automation & Continuous Improvement

• Develop and maintain PowerShell and Power Automate solutions to automate security, compliance, and operational processes.
• Ensure robust governance of software assets, configurations, source code repositories, AI systems, and technology platforms through effective configuration management, version control, change management, and security oversight.
• Drive continuous improvement initiatives that enhance operational efficiency, service reliability, and security maturity.
• Evaluate emerging Microsoft technologies and AI-driven capabilities to improve security operations and user experience.
• Support First Line Support Engineer by guiding or helping with IT-related issues, user setup, office technology administration such as Microsoft or Cloud Call.
• Act as an escalation point for any 2nd line Cloud or Infrastructure issues.
• Where necessary, assist in the governance and maintenance of core business platform.

Qualifications

• Strong hands-on experience administering Microsoft 365 Security, including Microsoft Defender, Purview, Compliance Centre, DLP, Information Protection, and Security Operations.
• Experience implementing security controls such as Conditional Access, MFA, Zero Trust, and Privileged Access Management.
• Good understanding of security frameworks including Cyber Essentials, ISO 27001, NIST, and GDPR.
• Proven experience managing Microsoft Entra ID (Azure AD), Active Directory, Single Sign-On (SSO), and identity governance solutions.
• Experience designing and implementing role-based access controls and user lifecycle management processes.
• Proven experience configuring M365 Endpoints management tools including Intune MDM & MAM.
• Detailed experience on M365 security technologies (M365 Security Centre, Compliance, AIP, DLP).
• Experience managing and securing enterprise applications such as Microsoft 365, Salesforce, HubSpot, HRIS, finance, and collaboration platforms.
• Knowledge of SaaS security, application access governance, SSO integrations, API security, and third-party risk management.
• Experience conducting vendor security assessments and application security reviews.
• Experience acting as a senior technical escalation point for security and infrastructure-related issues.
• Strong stakeholder management and ability to communicate technical risks and solutions to business audiences.
• Experience delivering technology projects and driving continuous improvement initiatives.
• Ability to balance operational support, security governance, and strategic technology planning.