Security Lead

In Cyclad we work with top international IT companies in order to boost their potential in delivering outstanding, cutting edge technologies that shape the world of the future. Currently, we are looking for an experienced Security Workstream Lead to take ownership of security operations and governance for enterprise-scale AI agents and Copilot solutions.

The role focuses on implementing a security-by-design approach across the Microsoft Copilot ecosystem and establishing a robust operating model for AI agents, governance, monitoring, and security operations.

You will work at the intersection of AI security, identity and access management, data protection, threat detection, and IT service management, helping translate security concepts into operational processes used by enterprise IT and security teams.

Project information:

• Location: Remotely

• Type of employment: B2B contract

• Remuneration: 160 - 180 PLN net + VAT per hour on B2B

• Project languages: English

Key Responsibilities:

• Define the security architecture and control framework for Microsoft 365 Copilot, Copilot Studio, and Azure AI Foundry.

• Establish and operationalize the security model for enterprise AI agents, including alignment between agent governance, observability, monitoring, and security functions.

• Define clear ownership and responsibilities across security, governance, monitoring, and operational teams.

• Design and implement identity and access governance using Microsoft Entra, Entra Agent ID, and least-privilege access principles.

• Operationalize Microsoft Purview capabilities, including data protection, sensitivity labeling, and DLP, together with Microsoft Defender and Microsoft Sentinel for agent-related threat detection and incident response.

• Integrate AI agent operations into existing ITIL/ITSM processes, covering incident, problem, change, and service request management.

• Define ownership models, RACI matrices, operational procedures, runbooks, and formal handover processes for IT operations and security teams.

• Support the validation of security controls through PoC activities, including agent discovery and inventory, identity lifecycle management, sensitive-data protection, threat detection, auditability, and access revocation.

• Ensure that security controls are not only technically implemented but also translated into repeatable and sustainable operational processes.

Requirements:

• Strong experience with Microsoft 365 security and administration.

• Practical knowledge of enterprise security frameworks, governance, and security-by-design principles.

• Experience with Microsoft Security Copilot and the broader Microsoft AI security ecosystem.

• Hands-on knowledge of Microsoft Defender and related security capabilities.

• Experience with Microsoft Entra / Entra ID and identity and access governance.

• Understanding of Microsoft Purview, data protection, DLP, and information governance.

• Familiarity with Microsoft Sentinel and security monitoring / incident response.

• Experience designing security controls and translating them into operational processes.

• Knowledge of ITIL / ITSM practices and enterprise service management.

• Ability to define RACI models, operational procedures, and security runbooks.

• Strong communication and stakeholder management skills, with the ability to coordinate across security, infrastructure, application, and operations teams.

We offer:

• Private medical care with dental care (covering 70% of costs). Family package option possible

• Multisport card (also for an accompanying person)

• Life insurance

• Work with talented engineers on large-scale, technically challenging projects