Senior Endpoint Security Professional

Job highlights

• Preferred Certifications
• Microsoft Certified: Endpoint Administrator Associate. Microsoft Security Operations Analyst Associate. Microsoft Cybersecurity Architect Expert. CISSP,CISM,CCSP or equivalent security certification
• Essential Skills Experience

Job Summary

Senior Endpoint Security Governance Consultant (Contract).

Location: Remote / Hybrid. Duration: 6-12 Months. Start: Immediate. Experience: 8+ Years.

Role Overview

We are looking for a highly skilled Endpoint Security Governance Consultant to support a large-scale Cyber Security and Endpoint Hardening Programme. The successful candidate will lead the implementation of application control, browser governance, endpoint security baselines, USB/device control, and Microsoft Intune policy management across a global enterprise environment.

This is an excellent opportunity for a hands-on consultant who combines strong technical expertise with governance, stakeholder management, and enterprise-scale deployment experience.

Key Responsibilities

• Lead discovery and analysis of applications, scripts, Office add-ins, browsers, browser extensions and USB device usage.
• Design and implement Windows Defender Application Control (WDAC) policies, including audit, enforcement and rollback strategies.
• Establish application trust models, managed installers, exception processes and governance controls.
• Govern Office add-ins, browser extensions and emerging AI productivity tools.
• Design and implement CIS-aligned browser security standards for Microsoft Edge and Google Chrome.
• Standardise browser configurations and drive phased removal of non-approved browsers.
• Develop and deploy Microsoft Intune security, compliance, configuration and application policies.
• Design and implement USB and removable media control solutions.
• Execute pilot testing, phased deployments and enterprise-wide rollouts.
• Create governance processes covering exceptions, recertification, reporting and audit readiness.
• Produce architecture documentation, operational runbooks and compliance reporting.

Essential Skills Experience

• Microsoft Intune
• Windows Defender Application Control (WDAC)
• Microsoft Defender for Endpoint
• Microsoft Defender XDR
• Microsoft Entra ID
• Endpoint Security and Compliance Policies
• PowerShell Scripting
• Microsoft Edge Enterprise Management
• Chrome Enterprise Management
• Application Allowlisting and Software Governance
• USB / Device Control Solutions
• CIS Benchmarks
• Zero Trust Security Principles
• Enterprise Security Governance

Desirable Skills

• Microsoft Purview
• Microsoft Sentinel
• Defender for Cloud Apps
• Conditional Access
• Privileged Identity Management (PIM)
• Tanium
• Nexthink
• Splunk
• ServiceNow
• Power BI
• Azure Automation
• Power Automate
• Jira / Confluence

Preferred Certifications

• Microsoft Certified: Endpoint Administrator Associate
• Microsoft Security Operations Analyst Associate
• Microsoft Cybersecurity Architect Expert
• CISSP, CISM, CCSP or equivalent security certification

Ideal Candidate

You will have proven experience delivering enterprise endpoint security and hardening programmes, with expertise across WDAC, Intune, Defender, browser security, application governance and device control. You will be comfortable operating across architecture, engineering, governance, compliance and deployment workstreams while engaging effectively with security, infrastructure, workplace technology and business stakeholders.

Key Deliverables

• Application Add-in Governance Framework
• WDAC Audit Enforcement Deployment
• Browser Standardisation Programme
• Browser Extension Governance Framework
• Endpoint Security Compliance Baselines
• USB / Device Control Implementation
• Exception Recertification Process
• Compliance Dashboards Reporting
• Operational Runbooks and Knowledge Transfer

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.