Security Lead

Cyclad works with top international IT companies to deliver cutting edge technologies for the future. This role involves leading security operations and governance for enterprise-scale AI agents and Copilot solutions within the Microsoft Copilot ecosystem.

• Strong experience with Microsoft 365 security and administration.
• Practical knowledge of enterprise security frameworks, governance, and security-by-design principles.
• Experience with Microsoft Security Copilot and the Microsoft AI security ecosystem.
• Hands-on knowledge of Microsoft Defender and related security capabilities.
• Experience with Microsoft Entra / Entra ID and identity and access governance.
• Understanding of Microsoft Purview, data protection, DLP, and information governance.
• Familiarity with Microsoft Sentinel and security monitoring / incident response.
• Experience designing security controls and translating them into operational processes.
• Knowledge of ITIL / ITSM practices and enterprise service management.
• Ability to define RACI models, operational procedures, and security runbooks.
• Strong communication and stakeholder management skills to coordinate across security, infrastructure, application, and operations teams.

• Define the security architecture and control framework for Microsoft 365 Copilot, Copilot Studio, and Azure AI Foundry.
• Establish and operationalize the security model for enterprise AI agents, aligning governance, observability, monitoring, and security functions.
• Define clear ownership and responsibilities across security, governance, monitoring, and operational teams.
• Design and implement identity and access governance using Microsoft Entra, Entra Agent ID, and least-privilege access.
• Operationalize Microsoft Purview capabilities including data protection, sensitivity labeling, and DLP, along with Microsoft Defender and Microsoft Sentinel for threat detection and incident response.
• Integrate AI agent operations into ITIL/ITSM processes covering incident, problem, change, and service request management.
• Define ownership models, RACI matrices, operational procedures, runbooks, and handover processes for IT operations and security teams.
• Support validation of security controls through PoC activities involving agent discovery, identity lifecycle management, sensitive-data protection, threat detection, auditability, and access revocation.
• Ensure security controls are translated into repeatable and sustainable operational processes.