Senior Program Manager - Microsoft

The mission of Microsoft Digital Security & Resilience (DSR) is to enable Microsoft to build the most trusted devices and services, while keeping our company safe and our data protected. ​As part of Microsoft’s Security, Compliance, Identity, and Management organization, and a steward of Microsoft and our customer’s data, a core function of Microsoft DSR is ensuring the security of every aspect of the business. Microsoft DSR is responsible for company-wide information security and compliance, with a strategic focus on information protection, assessment, awareness, governance, and enterprise business continuity. As customer zero, we deploy and secure these services inside Microsoft and then share best practices with enterprise customers at scale across the globe. We have exciting opportunities for you to innovate, influence, transform, inspire and grow within our organization and we encourage you to apply to learn more! 

Do you have a passion for security and get excited about impacting some of the largest and most complex security challenges Microsoft faces in the enterprise today? Are you looking to join a fast-paced, dynamic, and diverse team?

The ACE team is the assessment & advisory arm of Microsoft’s Digital Security and Resilience (DSR) organization. Our team is a dynamic organization chartered with providing security assurance and advisory services to Microsoft’s enterprise to help effectively identify and mitigate security risks. We are a high energy, highly collaborative team.

The successful candidate for this role will work across teams and service lines to execute on our ACE strategy for providing end to end security assurance for Microsoft. This includes application security assurance and automation capabilities across a portfolio of ~1700 apps and services. As a Sr. PM, you will be expected to contribute to the strategy and vision for the team and also drive continuous assurance into the engineering and operations processes. You will have the opportunity to work with engineering teams starting early in the development cycle to influence secure design and development.

We take pride in being a diverse and inclusive team, and we expect that you will join us on this mission.

Location: This role has the opportunity to work remote.

Key responsibilities:

• Provide security subject matter expertise and conduct security reviews.
• Lead & execute on a strategy that focuses on effective and efficient security processes to mitigate risk for Microsoft’s enterprise.
• Ensure the controls, platforms and tools which support the assurance processes are aligned to the latest security trends and engineering models.
• Work with other security assurance and security tooling teams across Microsoft to ensure a One Microsoft approach wherever possible for at-scale security assurance.
• Collaborate effectively with other engineering and pentest teams.

Knowledge, experience and skills:

• 5+ years of experience working as an information security professional, technical program management or similar engineering role.
• Experience with of one or more of the following: threat modelling, security architecture, identity management, network security, web application development, Appsec or DevSecOps.

Preferred, not required:

• Prior experience in application security and/or security assessment programs.
• Experience with cloud security assessment or cloud application development using Azure or another major cloud provider.
• Excellent written, verbal and presentation skills.
• Highly motivated and collaborative.
• Outstanding judgment, decision making skills, and the ability to thrive in fast-paced and ambiguous situations.
• Strong desire to innovate, grow, and learn as the industry continually evolves.
• Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity or relevant industry certifications.

#DSR

#MSFTSECURITY

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:

Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.  We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form.

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.