Senior Security Compliance Program Manager - CTJ - Poly

The Global CO&I Physical Security team is organized within CO+I and falls under its Cloud Infrasolution and Services, Security, Safety and Governance (CISS) team.  The Global CO+I Physical Security team is dedicated to delivering the most trustworthy and efficient physical security services to protect the personnel, infrastructure, data and confidential information foundational to the Microsoft Cloud.  Our vision is to be the most reliable, rigorous and trusted industry provider of hyperscale cloud physical security.   

This position falls under the US AGC Compliance and Security group within the Global CO+I Physical Security organization. The US AGC Compliance and Security team combines Microsoft’s extensive datacenter security experience with the rigorous standards of our U.S. Government partners to create the most secure cloud computing environments anywhere, enabling the mission-critical capabilities needed to keep our nation at the forefront of technology. Microsoft runs on trust and a robust physical security program is essential to meeting our customer commitments to secure their data.  

We are seeking a motivated and talented Senior Security Complicance Program Manager to partner with Datacenter Development (DCD), Datacenter Engineering (DCE), and Security Design and Delivery teams to ensure that datacenter facilities supporting secure Government operations are designed in compliance with ICD705, NISPOM, and other applicable U.S. Government standards. Additionally, this individual will ensure that the above teams and CO+I at large (and their suppliers) remain compliant with internal and external, including federal government-established, security requirements. Specifically, the role holder will help ensure compliance during the procurement, pre-construction, construction, and operational lifecycle phases of datacenter programs supporting unique customers and initiatives, including projects and programs for the U.S. Government. Preferably, the individual will have significant experience working within/for U.S Government programs that require a security clearance, and subject matter expertise in integrating U.S. Government requirements into the private sector, preferably in companies that have a diverse workforce and design, construct, and operate facilities. 

This position reports to the Director, Secure Build and Compliance within the US AGC Compliance and Security team and must be an experienced thought leader and a team player, possess strong communication, collaboration, and relationship management skills, and effectively manage a demanding workload in the execution of multiple concurrent projects and work streams across organizational boundaries.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. 

Responsibilities

• Develop, create, implement, and manage physical security policies, plans, processes and training material that position CO+I to operate in a manner that is compliant with relevant U.S. Government (and/or other unique environment) security standards and requirements for the physical design, construction, and operation of highly confidential and regulated projects.  
• Review datacenter architectural, electrical, and security systems designs, ensuring compliance with U.S. Government security standards required for customer compliance. 
• Review contactor submittals and verify compliance with contract specifications and U.S. Government security standards.  
• Continuously improve the efficiency and maturity of the overall compliance program, seeking data and recommending strategies and ideas to reduce churn, optimize resources, implement creative solutions to problems, scale, automate and simplify process whenever possible 
• Conduct field site visits to assess the state and health of security compliance; document issues identified during those visits requiring improvement; and follow through on recommendations/actions to resolution 
• Collaborate across internal groups, external suppliers, and customers. 
• Oversee assigned projects to ensure they are delivered in accordance with established requirements, deadlines, and applicable compliance obligations, laws, standards, regulations, and company policy. 
• Maintain confidentiality, information and material handling, and privacy without exception.