Bank of America
Bank of America
Bank of America is a global financial institution operating across banking, finance, and fintech. Its services include personal banking, small-business support, wealth management, investment services, and access to capital markets for individuals, businesses, and institutions. The company also focuses on responsible growth through sustainable finance, diversity initiatives, and community development programs.

Senior Microsoft 365 Security, Compliance and AI Architect – Charlotte Onsite

Senior Architect leading Microsoft 365 security, compliance, and AI platform architecture at Bank of America. Establish enterprise controls across Purview, Defender, Power Platform, Copilot, and responsible AI.

Description

  • Set the architectural vision, target operating model, solution designs, non-functional requirements, and roadmap.
  • Own the target-state architecture and multi-year roadmap for Microsoft Purview, Microsoft Information Protection, Microsoft Defender, Power Platform, Microsoft 365 Copilot, Copilot Studio, and related dependencies.
  • Create reference architectures, service boundaries, integration models, configuration standards, reusable patterns, and architecture guardrails.
  • Lead architecture reviews and guide designs for data classification, labeling, encryption, retention, records management, DLP, eDiscovery, auditing, insider risk, compliance monitoring, and data security posture management.
  • Define Microsoft Defender architecture for security-signal integration, threat detection and response, exposure management, incident workflows, telemetry, and security operations alignment.
  • Establish enterprise architecture and governance for Power Apps and Power Automate, covering environments, connectors, data policies, identity, ALM, monitoring, support, and lifecycle controls.
  • Define the governed foundation for Microsoft 365 Copilot and Copilot Studio agents, including data readiness, grounding sources, identity, permissions, connectors, monitoring, auditability, and responsible AI controls.
  • Work with Information Security, Data Management, Risk, Compliance, Legal, Privacy, Records Management, Engineering, and Operations teams.
  • Identify and mitigate risks related to oversharing, excessive permissions, unmanaged applications and agents, connector usage, sensitive-data exposure, policy gaps, fragmented controls, obsolescence, and third-party dependencies.
  • Assess Microsoft roadmap changes, licensing considerations, control effects, and emerging AI and security capabilities.
  • Convert changes into architecture decisions, investment choices, adoption sequencing, and risk-based recommendations.
  • Track architecture health and control metrics, and communicate risks, dependencies, exceptions, lifecycle status, and realized value to technical and executive governance forums.

Requirements

  • At least 10 years of experience in enterprise technology.
  • At least 5 years designing or governing enterprise-scale security, compliance, information protection, low-code, automation, data governance, or AI platform architectures.
  • Architecture experience with Microsoft Purview, Microsoft Information Protection, Microsoft Defender, Entra ID dependencies, Power Platform, Microsoft 365 Copilot, Copilot Studio, and related security, data, and integration services.
  • Advanced knowledge of Microsoft Purview and Microsoft Information Protection, including data classification, sensitivity labels, encryption, DLP, retention, records management, eDiscovery, auditing, insider risk, communication compliance, and data security posture management.
  • Strong knowledge of Microsoft Defender architecture, security telemetry, exposure management, threat detection and response, incident integration, Zero Trust, and security operations.
  • Expertise in Power Platform architecture and governance, including environments, connectors, data policies, identity, Dataverse, ALM, application ownership, monitoring, supportability, and lifecycle management.
  • Ability to design secure, governed foundations for Copilot and AI agents.
  • Proficiency with architecture methods and deliverables such as capability models, current- and target-state views, roadmaps, dependency and data flows, threat models, control designs, architecture decisions, and requirements-to-control traceability.
  • Working knowledge of Entra ID, Microsoft Graph, APIs, connectors, PowerShell, automation, CI/CD, telemetry, and platform operations.
  • Experience establishing platform standards, reference architectures, policy and control patterns, architecture governance, lifecycle roadmaps, and technical decision processes.
  • Experience enabling and governing low-code applications, workflow automation, generative AI, copilots, or Copilot agents in a large enterprise.
  • Experience in a highly regulated environment, including technology risk assessments, audits, regulatory examinations, control testing, security reviews, and remediation programs.
  • Bachelor’s degree in computer science, engineering, information systems, cybersecurity, or equivalent practical experience.
  • Relevant Microsoft, cloud, security, architecture, AI, or governance certifications are preferred.
  • Excellent written, verbal, facilitation, and executive communication abilities.
  • Strategic, pragmatic, outcome-focused, collaborative, and comfortable operating through ambiguity.

Benefits

  • Affordable, competitive, and flexible benefits.
  • Resources supporting physical, emotional, and financial wellness.
  • Opportunities to learn, grow, and contribute meaningfully.
  • In-office environment that supports collaboration, engagement, and career development.
  • Full-time employment.

Related Jobs

CrowdStrike

Regional Healthcare Sales Manager, West Coast

CrowdStrike

Lead strategic healthcare accounts across the West Coast, selling CrowdStrike’s AI-native cybersecurity platform to enterprise customers. Build executive relationships, work with channel partners, and grow regional revenue.

Open