Data Center Security Operations Manager - DSOM

Microsoft•Ashburn, VA

1d•Onsite

About The Position

In alignment with Microsoft values, this role cultivates an inclusive work environment and is crucial for delivering a trustworthy security program to protect personnel, infrastructure, data, and confidential information foundational to the Microsoft Cloud. The Datacenter Security Operations Manager is accountable for physical security operations at datacenters and related facilities within their region, collaborating with vendor security staff to meet collective security requirements. This role involves anticipating site-specific security disruptions, leading risk mitigation strategies, and communicating risk analysis findings. It offers opportunities for career growth, deeper physical security acumen, and global security program management. The position requires the manager to be located in the applicable region and work from an agreed-upon datacenter location. Microsoft’s Cloud Operations & Innovation (CO+I) is responsible for the core infrastructure and foundational technologies for Microsoft's online services. CO+I focuses on employee personal and professional development, offering trainings, growth opportunities, Career Rotation Programs, Diversity & Inclusion initiatives, and professional certifications. Microsoft's infrastructure includes a global portfolio of over 200 datacenters in 32 countries, supporting services for over 1 billion customers and 20 million businesses worldwide. Environmental sustainability and optimization are key aspects of their datacenter design and operations.

Requirements

4+ years experience in security program or program management or related field OR equivalent experience.
Citizenship & Citizenship Verification: This position requires verification of U.S. citizenship due to citizenship-based legal restrictions. Specifically, this position supports United States federal, state, and/or local United States government agency customers and is subject to certain citizenship-based restrictions where required or permitted by applicable law. To meet this legal requirement, citizenship will be verified via a valid passport.
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.
Citizenship Verification: This position requires verification of US Citizenship to meet federal government security requirements.

Nice To Haves

Bachelor's Degree in Business Risks or related field AND 8+ years' experience in Security Program or Program Management OR equivalent experience.
Industry security certifications such as CPP, PSP, or other relevant security certification

Responsibilities

Oversee the implementation of physical security policies and procedures at applicable datacenters, ensuring Microsoft’s physical security vendor guard force has the resources and information to deliver physical security services that meet Microsoft and customer requirements to protect people, information, and critical infrastructure.
Perform analysis to detect security threats, alerts, or risks and escalate to the critical incident response team and/or external authorities, if necessary.
Implement security protocols to support the physical protection of company personnel and assets.
Deliver and maintain security programs in areas of responsibility.
Partner with datacenter operations, security systems, and other Microsoft stakeholders to ensure secure and continuous operations while maintaining a One Team, One Microsoft environment.
Continuously improve the efficiency and maturity of the overall physical security program at Microsoft datacenters, seeking data and recommending strategies and ideas to reduce churn, optimizing resources including budget management and forecasting, implement creative solutions to problems, scale, automate and simplify processes whenever possible.
Receive escalations/notifications of physical security and business impacting events and appropriately triage, ensure that regional leadership is kept informed through regular communication as appropriate and that the necessary personnel for managing an incident respond effectively.
Support risk identification for datacenter insecurity and security disruption (e.g., life safety, business operations, reputation) to assist decision-makers in mitigating risks and responding to residual risks.
Summarize and report risk analysis to internal stakeholders and leaders.
Embody our culture and values.