We are seeking a highly skilled and experienced Principal Technical Program Manager, Operational Security to join the Microsoft AI security team. This role is pivotal in understanding new and emerging cybersecurity risks, enhancing the execution of operational security strategies, and managing large-scale rollouts of security projects. The ideal candidate will have a deep understanding of the evolving threat landscape and a proven track record in implementing robust security measures.

You will partner across Application and Operational Security disciplines and work directly with Engineering to implement and evolve the security posture of the organization and all of its products, including Consumer Copilot, Bing, MSN and Microsoft Advertising.

You will be accountable for creating actionable guidance, secure baseline configuration and assist engineering teams in the deployment and ongoing management of a standard and secure infrastructure. You will ensure adequate resources and attention is dedicated to fixing vulnerabilities which expose the organization to increased risk of malicious activities.

Why Join Us:

• Be part of a team that is at the forefront of cybersecurity innovation.

• Contribute to the protection of Microsoft’s digital ecosystem and earn the trust of our customers.

• Work in a dynamic and collaborative environment with opportunities for growth and development.

If you are passionate about cybersecurity and have the expertise to drive strategic security initiatives, we encourage you to apply for this exciting opportunity.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

Operational Security Execution:

• Assist in the development and implementation of comprehensive security strategies aligned with the Secure Future Initiative (SFI) and beyond.

• Manage technical execution with engineering, setting policy and building tooling and automation to enforce Security by Default baselines within Microsoft AI environments.

• Identify opportunities to continuously improve controls and monitoring for Secure Operations.

Security Project Orchestration:

• Oversee large-scale security project rollouts across the organization.

• Coordinate with various teams to ensure seamless execution of security initiatives.

• manageme security baseline design and execution, providing direct technical support and advice to engineering, providing reporting and summaries to leadership and generally delivering on projects to identify and mitigate security risks.

Cybersecurity and Operational Program:

• Adopt and oversee cybersecurity guidelines and standards, coordinate with compliance teams, and execute attestations.

• Ensure the adoption of Implementation Guidance issued through the Regulatory Governance program, as well as other compliance guidance, Council decisions, and applicable standards and controls. Including oversight of and coordination with compliance teams, and execution of necessary attestations and related records.

Qualifications

Required Qualifications:

• Bachelor's Degree AND 6+ years experience in engineering, product/technical program management, data analysis, product development, computer science, information security, or a related field

• OR equivalent experience.

• 3+ years of experience managing cross-functional and/or cross-team projects.

• 6+ years of hands-on experience with the Security Development Lifecycle (SDL).

Preferred Qualifications:

• Bachelor's Degree AND 10+ years experience in Computer Science, Information Security, or a related field

• OR Master's Degree AND 8+ years experience

• OR equivalent experience.

• Proven experience in managing large-scale security projects and rollouts.

• Proven experience in establishing security baselines for infrastructure, identifying and mitigating operational security risk and hands on implementation, coding, scripting and automating Azure (or equivalent) cloud infrastructure and services.

• Experience in cybersecurity assurance and program management preferably including online service development.

• Knowledge of and the ability to carry out the process of planning, organizing, and managing tasks and resources to accomplish a well-defined objective.

• Experience with defining and tracking OKRs and KPIs to measure program performance.

• Proficient communication and collaboration skills, with the ability to effectively interact with stakeholders at all levels of the organization.

• Experience with application security standards such as OWASP ASVS/Top 10, CWE 25.

• Experience with common security libraries, security controls, and common security flaws.

• Outstanding collaboration and partnership skills, with proven ability to drive results across teams.

• Coding skills in one or more general purpose scripting languages.

Technical Program Management IC5 - The typical base pay range for this role across the U.S. is USD $137,600 - $267,000 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $180,400 - $294,000 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay

Microsoft will accept applications for the role until November 4, 2024

#Search #MicrosoftAI #Security

Microsoft is an equal opportunity employer. Consistent with applicable law, all qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations (https://careers.microsoft.com/v2/global/en/accessibility.html) .