The posting
Overview
Microsoft runs one of the largest and most complex cloud estates in the world. The Infrastructure Exposure Management (IEM) team in the Microsoft CISO organization finds and measures security risk in Microsoft's cloud infrastructure, then drives the work to reduce it across the company's corporate environment and its many production tenants.
We're looking for a Principal Technical Program Manager to lead the team that drives this work. You will have a team of program managers and service engineers and own the strategy and roadmap for cloud security posture management (CSPM) at Microsoft. You will work with engineering, security, Azure and M365 service teams to make sure exposure findings lead to real, measurable risk reduction.
Responsibilities
- Lead and grow the team: Hire, coach and develop a high-performing team of program managers, and build an inclusive, accountable team culture.
- Own the CSPM strategy: Set the vision, roadmap and success metrics for exposure management across corporate and production tenants. That includes coverage, control definitions, portfolio of scanner tools, how findings are prioritized, and posture reporting.
- Drive large programs across many teams: Lead efforts that span several organizations, such as onboarding new tenants and resource types, near-real-time posture assessment, and bringing several security signals together into one prioritized view. Work with Microsoft Security product teams to drive enterprise security requirements into product capabilities.
- Drive remediation: Partner with engineering and service owners to turn findings into action through scorecards, governance and escalation. Balance security rigor against the cost and friction it puts on engineering teams.
- Run the operating rhythm: Own OKRs, KPIs, executive reviews and exception and risk-acceptance processes, and make sure the data behind them is trustworthy.
- Represent the program to leadership: Explain complex technical risk clearly to senior leaders and influence decisions across the company.
- Champion AI-first work: Use AI and automation to speed up control authoring, triage and posture insights.
Qualifications
Required/minimum qualifications
- Bachelor's Degree AND 6+ years experience in engineering, product/technical program management, data analysis, or product developmentOR equivalent experience.
- 1+ year(s) project or people management experience.
- 3+ years of experience managing cross-functional and/or cross-team projects.
Other Requirements
- Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.
Additional or preferred qualifications
- Bachelor's Degree AND 12+ years experience engineering, product/technical program management, data analysis, or product developmentOR equivalent experience.
- 4+ years people management experience.
- 8+ years of experience managing cross-functional and/or cross-team projects.
- 1+ year(s) of experience reading and/or writing code (e.g., sample documentation, product demos).
- Experience leading large, technically complex programs across multiple teams with measurable results.
- Hands-on knowledge of public cloud infrastructure (Azure, AWS or GCP) and security posture concepts such as configuration baselines, CSPM, and vulnerability or exposure management.
- Foundational understanding of security - core principles, threat modeling, applied cryptography, security protocols, etc.
- Experience running CSPM, CNAPP or exposure management programs in a large or multi-tenant enterprise.
- Familiarity with CIS Benchmarks, NIST CSF, the Microsoft Cloud Security Benchmark and attack-path-based risk prioritization.
- Track record of defining executive-level security metrics and driving remediation across many teams.
- Experience applying AI/LLM-based automation to security or engineering workflows.
Technical Program Management M5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.
