Microsoft CoPilot Security Specialist

Job Summary

Leading a focused, risk-based security assessment for a financial services client, the contract Microsoft CoPilot Security Specialist will evaluate Microsoft 365 Copilot's data access and governance within the Government Community Cloud (GCC) environment to identify and mitigate security risks before deployment.

Key Responsibilities

• Assess how Copilot retrieves and summarizes content through Microsoft Graph, identifying potential data exposure risks
• Review tenant controls and evaluate governance of agents, plugins, and Graph connectors to prevent unauthorized access to sensitive content
• Document findings in business-readable language, providing risk ratings and actionable recommendations for compliance with Zero Trust and data governance standards

Required Qualifications

• 3+ years of hands-on experience with Microsoft 365 Copilot deployment on GCC, governance, or security assessment
• Working knowledge of Microsoft Graph and its role in Copilot's data access model
• Practical experience with Copilot extensibility, including agents, plugins, and Graph connectors
• Familiarity with Microsoft Entra ID, Conditional Access, and Microsoft Purview as they relate to Copilot
• Understanding of Zero Trust principles applied to AI/Copilot environments