The Security, Compliance, Identity & Management (SCIM) team accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments. We have exciting opportunities for you to innovate, influence, transform, inspire, and grow within our organization and we encourage you to apply to learn more! 

The Digital Security + Resilience team in SCIM is looking Senior Program Managers to play a key role within the organization to drive the strategy and execution of building and operating the services to secure the enterprise. The ACE team is the security assurance & advisory arm of Microsoft’s Enterprise security organization. Our team is a dynamic organization chartered with providing Security Automation, Line of Business, Supply Chain and Venture Integration Security assurance as well as advisory services to help effectively identify and mitigate security risks inside the enterprise.

The successful candidate for this role will work across teams, service lines and execute on our ACE strategy to provide end to end security assurance services for Microsoft. This individual will be required to dig into new and emerging technology areas and define not only the security controls and workflows that must be implemented when deploying those products and services, but also in defining the strategy for how our team of assurance analysts will deliver assessments for applications or teams building on these new and emerging technologies. The Microsoft enterprise has modernized its engineering practices and continue to push the envelope for faster innovation by leveraging DevOps, CI/CD, automation, and agile approaches. This role will drive thought leadership to align security processes to this modern engineering ecosystem and drive continuous assurance and controls into the engineering and operations processes.

This role will have a lot of exposure to senior roles inside the company and requires a very high level of Organizational Agility, Executive Engagement, Leadership without authority and dealing with ambiguity as well as a good degree of EQ and empathy.

Responsibilities

• Develop & execute on a strategy that focuses on effective and efficient security processes to mitigate risk for Microsoft’s enterprise.
• Partner with key organizations to unify security goals and objectives
• Communicate plans to executives and key influencers
• Work with Microsoft internal leaders to advocate security & risk management into their businesses.
• Must be able to work autonomously as well as in team environments, often in stressful, high impact situations
• Must be familiar with Microsoft and 3rdparty PaaS and SaaS technologies
• Must be familiar with industry best practices, certifications, and standards around secure development, security assurance, and supply chain risk management.

Qualifications

Basic requirements:

• 3+ Year experience in program management.
• 2+ years Cybersecurity experience
• 3+ years’ experience with shipping software or performing security assessments on software

Preferred requirements:

• Highly motivated to have a strong and long-lasting impact
• Fast learner that adapts to change
• Strong cross group collaboration skills
• A growth Mindset is critical as we are looking for new ways to engage and scale our programs
• Strong collaboration and team player. Enjoy helping your peers to be great.
• Manage ambiguity, with an ability to drive clarity to the team
• Working knowledge information security and risk management processes and controls including security operations, security architecture, security assessments, security engineering, risk management and compliance.
• Ability to see the big picture
• Experience managing matrixed organizations
• Excellent written, verbal and presentation skills
• Strong cross group and the ability to negotiate with senior talent across the company is critical.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.