Senior Technical Program Manager - Security Compliance Governance
 Microsoft | |
 United States, Texas, Irving | |
| 7000 State Highway 161 (Show on map) | |
 Aug 20, 2025 | |
|
OverviewThe Cloud & AI organization accelerates Microsoft's mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers' heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. Microsoft is one of the largest enterprise service companies in the world. We are looking for a Senior Technical Program Manager to support the governance arm of Microsoft's cybersecurity GRC function, with a focus on regulatory compliance readiness, control oversight, and policy integration. The ideal candidate will have deep experience in global cybersecurity regulations (e.g., NIS2, DORA, CRA), and a understanding of how policy, standards, and controls work together to mitigate risk. This individual will help shape and maintain governance structures, validate gap analyses, and drive metric-based reporting to assess program health. Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.
ResponsibilitiesGovernance & Oversight-Maintain traceability between regulatory requirements, Microsoft Security Standards (MSS), and control frameworks (e.g., NIST SP 800-30, ISO 27005)-Participate in governance reviews, arbitration, and compliance tracking across standard areas. Gap Analysis & Control Validation-Lead validation of gap analysis outputs -Collaborate with product teams and SMEs to confirm control coverage and identify remediation plans.-Ensure gaps are documented, prioritized, and linked to risk registers and BI reporting tools.-Ensure controls are measurable, actionable, and mapped to regulatory expectations. Embody our culture and values | |