At a Glance
- Tasks: Lead security assessments and implement Microsoft 365 compliance solutions.
- Company: Specialist consultancy focused on Microsoft security and compliance.
- Benefits: £450/day, hybrid work, and a dynamic consulting environment.
- Other info: 3-month rolling contract with opportunities for professional growth.
- Why this job: Make a real impact on security and compliance for major clients.
- Qualifications: Extensive Microsoft 365 security experience and strong technical skills.
- Microsoft Security & Compliance Consultant
- 3-Month Rolling Contract
- £450/day | Outside IR35
- London Hybrid (3 Days Per Week)
We're supporting a specialist consultancy engaged on a major Microsoft 365 security and compliance programme for one of its clients.
They're looking for an experienced Microsoft Security & Compliance Consultant to lead the assessment, design, and implementation of security monitoring, data protection, and information governance controls across the Microsoft ecosystem.
This is a hands-on consulting engagement requiring strong technical expertise across Microsoft Defender and Microsoft Purview, coupled with the ability to engage stakeholders, provide strategic recommendations, and deliver practical improvements.
The Role
You will work closely with technical and business stakeholders to evaluate the current Microsoft security estate, identify gaps and risks, and design a roadmap for improving detection, response, data protection, and information lifecycle management.
- Security Monitoring & Threat Detection
- Review and assess the deployment of Microsoft Defender technologies across the organisation.
- Benchmark existing security configurations against Microsoft best practices and recognised industry standards.
- Evaluate alert quality, incident response processes, and overall monitoring effectiveness.
- Identify gaps in detection capability and security visibility.
- Assess coverage against MITRE ATT&CK techniques and tactics.
- Produce a prioritised remediation roadmap, balancing risk, effort, and business impact.
- Design alerting, escalation, and operational response processes.
- Data Loss Prevention & Information Protection
- Assess how sensitive information is created, shared, stored, and transferred across the organisation.
- Define an information classification and sensitivity labelling framework.
- Design and implement Microsoft Purview DLP controls across Microsoft 365 services and endpoints.
- Develop a phased deployment approach, including simulation, testing, tuning, and enforcement.
- Establish exception management and governance processes.
- Integrate DLP monitoring and incidents into wider security operations.
- Retention, Governance & Compliance
- Review retention obligations and compliance requirements across Microsoft 365 workloads.
- Translate regulatory and business requirements into implementable Purview controls.
- Design retention policies, retention labels, and automated policy application.
- Support GDPR-related processes, including data access and data deletion workflows.
- Develop operational procedures and governance documentation.
- Ensure appropriate auditability and evidencing of policy operation.
- Required Experience
- Extensive Microsoft 365 Security and Compliance experience.
- Strong hands-on Microsoft Defender expertise, including Endpoint, Identity, Office 365, Cloud Apps, and associated security controls.
- Microsoft Purview Information Protection and Data Loss Prevention.
- Purview Records Management and Retention.
- Microsoft Entra ID and identity security controls.
- Security Operations, alert management, and incident response.
- MITRE ATT&CK framework experience.
- Strong understanding of GDPR, information governance, and compliance requirements.
- Experience delivering security and compliance programmes within enterprise Microsoft environments.
- Previous consultancy or client-facing delivery experience.
Desirable
- Microsoft Security certifications (SC-200, SC-300, SC-400, MS-102 or equivalent).
- Azure security experience.
- Experience working within regulated industries.
- Previous delivery of large-scale DLP, governance, or compliance transformation programmes.
- What's Important
This role would suit a consultant who combines strong technical delivery capability with the ability to assess complex environments, engage senior stakeholders, and provide clear, pragmatic recommendations that improve both security posture and regulatory compliance.
- 3-Month Rolling Contract | Outside IR35 | £450/day | London Hybrid (3 Days Per Week)
- #J-18808-Ljbffr
Microsoft Security Consultant (contract) in City of Westminster employer: Jefferson Frank
Join a leading UK manufacturing and supply-chain organisation that is at the forefront of digital transformation. With a strong commitment to employee development, you will have access to competitive salaries and opportunities to enhance your IT and Data management skills in a collaborative and dynamic work environment. Located in Surrey, this hybrid role offers the chance to engage with diverse stakeholders while contributing to innovative solutions that drive business success.
StudySmarter Expert Advice🤫
We think this is how you could land Microsoft Security Consultant (contract) in City of Westminster
✨Get Engaged in Cybersecurity Communities
Dive into online forums or local meetups, like OWASP events or Cybersecurity conferences. These spaces are packed with pros who can share insights and might even know about temporary roles at places like Jefferson Frank.
✨Showcase Your Skills Publicly
Link your GitHub or create a series of blogs sharing your knowledge on cybersecurity topics. It’s a great way to demonstrate your expertise and attract attention from hiring managers, especially when they see your passion in action.
✨Stay On Top of Temp Opportunities
Keep an eye on platforms that list temporary positions specifically in tech. Websites focusing on contract roles in cybersecurity can lead straight to employers like Jefferson Frank.
✨Make Contact with Recruiters Specialising in Cybersecurity
Reach out to recruitment agencies that focus on cybersecurity roles. They often have insights into temporary roles before they’re advertised and can put your name forward to companies like Jefferson Frank.
We think you need these skills to ace Microsoft Security Consultant (contract) in City of Westminster
Some tips for your application 🫡
Show Off Your Technical Skills:In cybersecurity, it's vital to highlight your skills with relevant tools and technologies. Make sure your CV showcases your experience with firewalls, intrusion detection systems, and any cybersecurity frameworks you've worked with. This gives Jefferson Frank a clear view of your capabilities right off the bat.
Certifications Matter:If you’ve got any cybersecurity certifications, like CompTIA Security+ or CISSP, flaunt them! These not only validate your skills but also show that you’re committed to the field. Add a section to your CV specifically for this, because in a temporary role like this, those credentials can really set you apart.
Tailor Your Cover Letter to the Role:For a temporary position, we want to see your willingness to learn and adapt quickly. Make your cover letter specific to the role at Jefferson Frank; mention why you’re excited about the opportunity and how it fits your career goals. A personal touch can make a big difference!
Don’t Forget the Soft Skills:In cybersecurity, technical skills are crucial, but so are soft skills like teamwork and communication. Make sure to weave examples of how you've collaborated with teams or communicated complex ideas into your application. This shows that you're not just a tech whizz but also a great team player, perfect for a temporary role at Jefferson Frank.
How to prepare for a job interview at Jefferson Frank
✨Brush Up on Technical Skills
Make sure you’re familiar with the latest cybersecurity tools and techniques, like firewalls, intrusion detection systems, and malware analysis. During the interview with Jefferson Frank for the Microsoft Security Consultant (contract), be prepared to discuss specific scenarios where you tackled security threats or vulnerabilities.
✨Show Your Problem-Solving Prowess
Cybersecurity is all about thinking on your feet. Expect technical questions that require you to demonstrate your problem-solving abilities. You might be presented with a mock security breach scenario, so practising your responses to potential threats can be a game changer!
✨Demonstrate Your Adaptability
As this is a temporary role, showing that you're adaptable and quick to learn is crucial. Talk about times you've picked up new skills or reacted to changing situations quickly. Employers want to know you can hit the ground running and keep things secure during your short stay at Jefferson Frank.
✨Bring Relevant Certifications
If you have any relevant cybersecurity certifications, like CompTIA Security+ or CEH, be sure to mention them. This can really help you stand out during a temporary hiring process, as it showcases your commitment to the field and your readiness to take on the Microsoft Security Consultant (contract) role at Jefferson Frank.
