Note: The job is a remote job and is open to candidates in USA. Microsoft’s CISO Operations Security Implementation & Capability team is seeking a Principal Technical Program Manager to lead complex, high-risk cybersecurity programs and portfolios from strategy through sustained execution. The role translates executive intent into scalable operating models, coordinates cross-functional leaders, and uses evidence and AI to measure outcomes and guide decisions.
Responsibilities
- Translate CISO strategy and executive intent into enterprise-scale programs and portfolios by framing ambiguous problems, defining target outcomes and success measures, establishing governance and decision rights, mapping dependencies, and creating executable multi-year roadmaps
- Architect durable operating models, automated workflows, and reusable capabilities that institutionalize effective practices, drive adoption across organizational boundaries, and scale beyond individual programs or leaders
- Orchestrate complex, high-risk initiatives across Microsoft by aligning senior leaders in engineering, security, operations, risk and compliance, and business organizations; establishing operating rhythms and accountability; resolving systemic blockers; and driving timely decisions and tradeoffs
- Use AI, telemetry, and qualitative and quantitative evidence to instrument outcomes, identify emerging risk and program drift, improve decision velocity and accuracy, and continuously optimize CISO operations and portfolio investments
- Serve as a trusted advisor to senior executives by synthesizing complex technical, operational, and organizational inputs into clear narratives, options, tradeoffs, and recommendations that shape strategy, investment, and execution decisions
Skills
- Bachelor's Degree AND 8+ years experience in engineering, product/technical program management, data analysis, or product development + OR equivalent experience
- 6+ years of experience managing cross-functional and/or cross-team projects
- This role will require access to information that is controlled for export under export control regulations, potentially under the U.S. International Traffic in Arms Regulations or Export Administration Regulations, the EU Dual Use Regulation, and/or other export control regulations. As a condition of employment, the successful candidate will be required to provide either proof of their country of citizenship or proof of their U.S. permanent residency or other protected status (e.g., under 8 U.S.C. 1324b(a)(3)) for assessment of eligibility to access the export controlled information
- This position requires verification of citizenship due to citizenship-based legal restrictions. Specifically, this position supports United States federal, state, and/or local government agency customers and is subject to certain citizenship-based restrictions where required or permitted by applicable law
- Demonstrated experience leading enterprise-scale, high-risk, and executive-visible programs through ambiguity, competing priorities, and evolving requirements, from problem definition and strategy through execution, adoption, and sustained outcomes
- Exceptional leadership and influence skills, with a demonstrated ability to align senior executives and diverse technical and business stakeholders, clarify decision rights, resolve conflict, and drive accountability across organizational boundaries without formal authority
- Executive-level communication and advisory capability, including experience framing complex technical and operational issues, presenting options and tradeoffs, constructively challenging assumptions, and influencing decisions with senior leaders
- Expertise in diagnosing unfamiliar, systemic problems and applying structured thinking, experimentation, and sound judgment to establish direction and make consequential decisions under uncertainty
- Advanced analytical and systems-thinking skills, with the ability to model complex organizational and technical systems, identify leverage points and unintended consequences, and translate qualitative and quantitative evidence into portfolio priorities and investment recommendations
- Demonstrated ability to lead a portfolio of concurrent strategic initiatives in a fast-paced environment, making explicit priority and resource tradeoffs while sustaining accountability for outcomes
- Deep technical fluency in cybersecurity or adjacent technical domains, with the ability to evaluate architecture and risk, challenge assumptions, and translate effectively between technical experts and executive leaders
- Product-oriented leadership, with experience shaping customer-centered strategy, prioritizing investments, driving adoption, and managing the lifecycle of enterprise platforms, services, or organizational capabilities
- Experience shaping enterprise security governance, or risk and compliance programs by integrating policy, risk assessments, controls, audit requirements, and executive oversight into scalable operating mechanisms and strategic decisions
Company Overview