Microsoft 365 Security & Governance Specialist (m/w/d)

The FINOVESTA GmbH is a dynamic, healthy growing company with currently around 50 employees. Our core business lies in trading securities and derivatives. FINOVESTA holds its own memberships at many national and international stock exchanges and is connected to further markets via brokers. We only conduct transactions on our own account and for our own account.

Microsoft 365, artificial intelligence, and data-driven applications shall be used safely, compliantly, and productively by us. At the same time, we are building up our structures in the areas of Microsoft 365 Security, Data Classification, Access Management, Microsoft Purview, DLP, and IT Governance further. To supplement our existing IT team, we are looking for you as an interface between internal IT administration, information security, data protection, compliance, management, and our AI Enablement area.

In this role, you will shape the technical and organizational guidelines for safe Microsoft 365 usage actively with...

Aufgaben

• Einführung, Pflege und Optimierung von Microsoft Purview, insbesondere Sensitivity Labels, Data Loss Prevention, Audit, Datenklassifizierung und Information Protection
• Prüfung und Weiterentwicklung von Berechtigungs-, Rollen- und Zugriffskonzepten in Microsoft 365, Entra ID, Teams, OneDrive, SharePoint und weiteren Systemen
• Definition praxistauglicher Schutz- und Governance-Regeln für vertrauliche Unternehmensdaten gemeinsam mit interner IT, Datenschutz, Compliance und Geschäftsführung
• Sicherheits- und datenschutzbezogene Bewertung von Microsoft 365- und Copilot-/KI-Nutzung aus Governance-Sicht, insbesondere im Hinblick auf Datenquellen, Zugriffsrechte, Labels, DLP-Regeln und Auditierbarkeit
• Beratung der internen IT-Administration zu sicherheitsrelevanten Konfigurationen, z. B. MFA, Conditional Access, Intune, Gerätekonformität, externe Freigaben und Admin-Rollen
• Unterstützung bei Richtlinien, Dokumentationen und Nachweisen im Bereich IT-Sicherheit, Datenklassifizierung, KI-Nutzungsleitplanken und DORA
• Enge Zusammenarbeit mit dem AI-Enablement-Bereich, damit neue KI-Anwendungsfälle auf einer sicheren und nachvollziehbaren Microsoft 365-Governance-Grundlage umgesetzt werden können

Abgrenzung zu AI-Enablement

This position is not responsible for the technical development of KI use cases, employee training, process automation, data analysis, model/agent prototyping, or the company-wide KI roadmap. These topics lie with the AI Enablement area.

Your focus lies on the technical and organizational guidelines for Microsoft 365, Data Classification, Access Management, and accountability. Specifically, it's about questions like:

• Which data can be used in Microsoft 365 and KI applications?
• What permissions are required, and where are access controls too broad?
• What labels, DLP rules, and audit controls need to apply?
• What Microsoft 365 settings are necessary for safe use of Copilot, Agents, and Connectors?
• How will sensitive information be protected and accountability ensured?

Qualifikation

Our requirements:

• SUCCESSFUL completion of an IT-related education, e.g., Fachinformatiker for Systemintegration, or a completed degree with IT/Security relevance
• Practical experience in Microsoft 365, IT Security, IT Governance, or Information Security
• Good knowledge of Microsoft 365, particularly Entra ID, Exchange Online, Teams, OneDrive, and ideally SharePoint
• Experience in designing, implementing, and applying access models, roles, access controls, and data classification
• First practical experience with Microsoft Purview, Sensitivity Labels, DLP, Audit, Intune, and Conditional Access
• Basic understanding of data protection, information security, and regulatory requirements in a regulated environment
• Ability to document technical requirements clearly and align with internal IT, departments, compliance, and data protection
• Structured, meticulous, and self-responsible working style, as well as heightened security and responsibility awareness
• Fluent German language skills and good English language skills

Advantages are:

• Experience in regulated industries, e.g., financial services, securities trading, banks, insurance companies, or critical infrastructure
• Knowledge of DORA, ISO 27001, BSI IT-Grundschutz, BAIT/MaRisk, or comparable requirements
• Microsoft certifications, e.g., SC-300, SC-400, MS-102, or similar qualifications
• Basic understanding of Microsoft Copilot and Power Platform from the perspective of security, permissions, and data access

Benefits

We offer:

• A responsible role at the interface between Microsoft 365, Information Security, Data Protection, Compliance, Management, and AI Enablement
• The opportunity to shape modern security and governance structures in a regulated financial environment actively
• A technologically demanding environment with Microsoft 365, Microsoft Purview, Entra ID, Intune, DLP, Data Classification, and Copilot/KI applications
• Fast decision-making paths in a growing company with around 50 employees
• Support for professional further education and Microsoft certifications, e.g., SC-300, SC-400, or MS-102
• A competitive remuneration package corresponding to your experience and qualifications
• Hybrid work after familiarization and task assignment; at the same time, the role lives from close cooperation with IT, Compliance, Data Protection, and Management on site
• We want to shape the future with you. Therefore, we place great value on a comprehensive onboarding process and an unlimited employment contract
• Support for your mobility: bike (Swap Fiets), train or parking space on site.
• Team spirit is important! Therefore, we offer regular joint activities as well as a discounted Urban Sports Club membership
• 30 days of vacation entitlement, plus free days on December 24th and 31st
• Fresh fruit, snacks, and refreshing drinks

Find more English-speaking jobs in Germany on Arbeitnow