Data Center Security Operations Manager

Microsoft•Boydton, VA

1d•Onsite

About The Position

In alignment with Microsoft values, this role is for a Datacenter Security Operations Manager in CO+I Physical Security, part of a global team dedicated to protecting the personnel, infrastructure, data, and confidential information foundational to the Microsoft Cloud. The role is accountable for physical security operations at datacenters and related facilities within the applicable region, collaborating with vendor security guarding staff to meet collective security requirements. Responsibilities include providing security capabilities, anticipating site-specific insecurity and security disruptions (e.g., life safety, business operations, reputation), and leading discussions on developing strategies for mitigating risks and responding to residual risks. The role will communicate risk analysis findings and root cause analysis reports to internal and external stakeholders and leaders. This opportunity offers career growth, deeper physical security acumen, and global security program management. The Datacenter Security Operations Manager must be located in the applicable region and will work from an agreed-upon datacenter location. Microsoft’s Cloud Operations & Innovation (CO+I) powers Microsoft's online services including Bing, Office 365, Xbox, OneDrive, and the Microsoft Azure platform. CO+I focuses on personal and professional development with trainings, growth opportunities, Career Rotation Programs, Diversity & Inclusion initiatives, and professional certifications. Microsoft's infrastructure includes a large global portfolio of over 200 datacenters in 32 countries and millions of servers, managed by subject matter experts supporting over 1 billion customers and 20 million businesses worldwide. Environmental sustainability and optimization are key in datacenter design and operations. The role is an opportunity to empower billions globally and be at the forefront of action within CO+I.

Requirements

4+ years' experience in Security Program or Program Management or related field
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role.
Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.
Citizenship Verification: This position requires verification of US Citizenship to meet federal government security requirements.

Nice To Haves

Bachelor's Degree in Business Risks or related field AND 8+ years' experience in Security Program or Program Management OR equivalent experience.
Industry security certifications such as CPP, PSP, or other relevant security certification

Responsibilities

Oversee the implementation of physical security policies and procedures at applicable datacenters, ensuring Microsoft’s physical security vendor guard force has the resources and information to deliver physical security services that meet Microsoft and customer requirements to protect people, information, and critical infrastructure.
Perform analysis to detect security threats, alerts, or risks and escalate to the critical incident response team and/or external authorities, if necessary.
Implement security protocols to support the physical protection of company personnel and assets.
Deliver and maintain security programs in areas of responsibility.
Partner with datacenter operations, security systems, and other Microsoft stakeholders to ensure secure and continuous operations while maintaining a One Team, One Microsoft environment.
Continuously improve the efficiency and maturity of the overall physical security program at Microsoft datacenters, seeking data and recommending strategies and ideas to reduce churn, optimizing resources including budget management and forecasting, implement creative solutions to problems, scale, automate and simplify processes whenever possible.
Receive escalations/notifications of physical security and business impacting events and appropriately triage, ensure that regional leadership is kept informed through regular communication as appropriate and that the necessary personnel for managing an incident respond effectively.
Contribute to collaborative efforts with stakeholders to support security capabilities.
Support risk identification for datacenter insecurity and security disruption (e.g., life safety, business operations, reputation) to assist decision-makers in mitigating risks and responding to residual risks.
Summarize and report risk analysis to internal stakeholders and leaders.
Embody our culture and values.