Principal Technical Program Manager, Operational Security

You will partner across Application and Operational Security disciplines and work directly with Engineering to implement and evolve the security posture of the organization and all of its products, including Consumer Copilot, Bing, MSN and Microsoft Advertising.

You will be accountable for creating actionable guidance, secure baseline configuration and assist engineering teams in the deployment and ongoing management of a standard and secure infrastructure. You will ensure adequate resources and attention is dedicated to fixing vulnerabilities which expose the organization to increased risk of malicious activities.

Why Join Us:

• Be part of a team that is at the forefront of cybersecurity innovation.
• Contribute to the protection of Microsoft’s digital ecosystem and earn the trust of our customers.
• Work in a dynamic and collaborative environment with opportunities for growth and development.

If you are passionate about cybersecurity and have the expertise to drive strategic security initiatives, we encourage you to apply for this exciting opportunity.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

• Assist in the development and implementation of comprehensive security strategies aligned with the Secure Future Initiative (SFI) and beyond.
• Manage technical execution with engineering, setting policy and building tooling and automation to enforce Security by Default baselines within Microsoft AI environments.
• Identify opportunities to continuously improve controls and monitoring for Secure Operations.

Security Project Orchestration:

• Oversee large-scale security project rollouts across the organization.
• Coordinate with various teams to ensure seamless execution of security initiatives.
• manageme security baseline design and execution, providing direct technical support and advice to engineering, providing reporting and summaries to leadership and generally delivering on projects to identify and mitigate security risks.

Cybersecurity and Operational Program:

• Adopt and oversee cybersecurity guidelines and standards, coordinate with compliance teams, and execute attestations.
• Ensure the adoption of Implementation Guidance issued through the Regulatory Governance program, as well as other compliance guidance, Council decisions, and applicable standards and controls. Including oversight of and coordination with compliance teams, and execution of necessary attestations and related records.

Qualifications

Required Qualifications: 

• Bachelor's Degree AND 6+ years experience in engineering, product/technical program management, data analysis, product development, computer science, information security, or a related field
  • OR equivalent experience.
• 3+ years of experience managing cross-functional and/or cross-team projects.
• 6+ years of hands-on experience with the Security Development Lifecycle (SDL).

Preferred Qualifications: 

• Bachelor's Degree AND 10+ years experience in Computer Science, Information Security, or a related field
  • OR Master's Degree AND 8+ years experience
  • OR equivalent experience.
• Proven experience in managing large-scale security projects and rollouts.
  
• Proven experience in establishing security baselines for infrastructure, identifying and mitigating operational security risk and hands on implementation, coding, scripti