Assistant General Counsel, Cybersecurity

Microsoft’s Corporate, External and Legal Affairs (CELA) organization is seeking an experienced attorney to join the Microsoft Security legal team as the Assistant General Counsel, Cybersecurity supporting Microsoft’s Chief Information Security Officer (CISO) and the Digital Security + Resilience (DSR), Microsoft Security Response Center (MSRC) and Risk & Resilience (R&R) teams. 

This role will serve as a trusted advisor for, and provide legal support to, the CISO as the CISO identifies cyber risks to Microsoft’s business assets across the digital estate, mitigates that risk in collaboration with leadership and leads the company’s security operations and governance teams.  With the recently announced Secure Future Initiative (SFI), we welcome a great teammate to join us to help realize this journey for the company!  

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

Legal Counsel 

• Legal Support of Microsoft’s CISO: Act as legal counsel for Microsoft’s CISO, serving as a key business partner and valued legal advisor to senior leadership by providing actionable advice on a wide range of cybersecurity, privacy, compliance, and risk issues, including those uniquely pertaining to the role of the CISO. 
• Legal Support of Microsoft core security operations teams: Provide legal support to certain of Microsoft’s core security operations teams, which run internal operations such as risk and resiliency, security operations center, supply chain security, vulnerability management, insider threat program, the security fundamentals team powering security baselines for Microsoft’s products and services, and internal roll-out of security products and initiatives, in collaboration with other cybersecurity lawyers and personnel. 
• Legal Support of External-Facing Programmatic Security Activities by Microsoft: Provide legal support to Microsoft’s external-facing security programs, including Microsoft’s bug bounty program, MAPP, and vulnerability management security information sharing initiatives.    
• Legal Management of Security Incidents: Lead and manage a virtual team providing legal support for non-nation state security incidents, including collaborating with engineering legal teams, providing legal review of external communications, and advising on incident disclosure obligations; stay abreast of nation-state security incidents developments and provide support, as needed. 
• Training & Education: Provide ongoing training to Microsoft employees on cybersecurity legal obligations and best practices. 

Operational Excellence 

• Provide input and continuous feedback to improve process efficiencies within role. 
• Identify opportunities and tools to increase operational efficiency and effectiveness. 

Communication 

• Collaborate effectively across CELA and with business clients. 
• Organize issues and ideas in written and oral communication. 

Embody our Culture and Values 

Qualifications

Required/Minimum Qualifications 

• Juris Doctorate or equivalent international degree
  • OR Completion of a Legal Apprenticeship.

• Active license to practice law in a U.S. jurisdiction and capable of meeting admission requirements in relevant jurisdiction. 
• 10+ years’ experience as a practicing attorney in corporate law, privacy, and/or cybersecurity regulatory compliance. 
  • OR equivalent practice of law.

Other Qualifications

This position requires verification of U.S. citizenship due to citizenship-based legal restrictions. Specifically, this position supports United States federal, state, and/or local US government agency customers and is subject to certain citizenship-based restricti