Technical Program Management Lead- CISO

Microsoft • Redmond, WA

3d • $142,800 - $304,200

About The Position

Microsoft's Infrastructure Exposure Management (IEM) team in the CISO organization identifies and measures security risk across Microsoft's cloud infrastructure and drives risk reduction across corporate environments and production tenants. The Principal Technical Program Management Lead will lead a team of program managers and service engineers and own the strategy and roadmap for cloud security posture management (CSPM) at Microsoft. The role partners with engineering, security, Azure, and Microsoft 365 service teams to ensure exposure findings lead to measurable risk reduction.

The position includes setting CSPM strategy, leading cross-organizational programs, driving remediation, managing operational reviews and risk-acceptance processes, communicating technical risk to senior leaders, and using AI and automation to improve security workflows.

Requirements

• Bachelor's degree and at least 6 years of experience in engineering, product or technical program management, data analysis, or product development, or equivalent experience.
• At least 1 year of project or people management experience.
• At least 3 years of experience managing cross-functional and/or cross-team projects.
• Ability to meet Microsoft, customer, and/or government security screening requirements, including passing the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.

Nice To Haves

• Bachelor's degree and at least 12 years of experience in engineering, product or technical program management, data analysis, or product development, or equivalent experience.
• At least 4 years of people management experience.
• At least 8 years of experience managing cross-functional and/or cross-team projects.
• At least 1 year of experience reading and/or writing code, such as for sample documentation or product demos.
• Experience leading large, technically complex programs across multiple teams with measurable results.
• Hands-on knowledge of public cloud infrastructure (Azure, AWS, or GCP) and security posture concepts such as configuration baselines, CSPM, and vulnerability or exposure management.
• Foundational understanding of security principles, threat modeling, applied cryptography, and security protocols.
• Experience running CSPM, CNAPP, or exposure management programs in a large or multi-tenant enterprise.
• Familiarity with CIS Benchmarks, NIST CSF, the Microsoft Cloud Security Benchmark, and attack-path-based risk prioritization.
• Track record of defining executive-level security metrics and driving remediation across many teams.
• Experience applying AI/LLM-based automation to security or engineering workflows.

Responsibilities

• Hire, coach, and develop a high-performing team of program managers and foster an inclusive, accountable team culture.
• Set the vision, roadmap, and success metrics for exposure management across corporate and production tenants, including coverage, control definitions, scanner tools, prioritization of findings, and posture reporting.
• Lead programs spanning multiple organizations, including onboarding tenants and resource types, enabling near-real-time posture assessment, and consolidating security signals into a prioritized view.
• Work with Microsoft Security product teams to incorporate enterprise security requirements into product capabilities.
• Partner with engineering and service owners to drive remediation through scorecards, governance, and escalation while balancing security rigor with engineering cost and friction.
• Own OKRs, KPIs, executive reviews, and exception and risk-acceptance processes, ensuring the underlying data is trustworthy.
• Communicate complex technical risk to senior leaders and influence decisions across the company.
• Use AI and automation to accelerate control authoring, triage, and posture insights.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal