Technical Program Management Lead- CISO

Microsoft • Redmond, WA

2d • $142,800 - $274,800

About The Position

The Principal Technical Program Manager will lead Microsoft’s Infrastructure Exposure Management (IEM) team within the CISO organization. The team identifies and measures security risk across Microsoft’s cloud infrastructure and drives risk reduction across the corporate environment and production tenants. The role leads a team of program managers and service engineers and owns the strategy and roadmap for cloud security posture management (CSPM) at Microsoft, working with engineering, security, Azure, and M365 service teams to turn exposure findings into measurable risk reduction.

Requirements

• Bachelor’s degree and 6+ years of experience in engineering, product or technical program management, data analysis, or product development, or equivalent experience.
• At least 1 year of project or people management experience.
• At least 3 years of experience managing cross-functional and/or cross-team projects.
• Ability to meet Microsoft, customer, and/or government security screening requirements, including passing the Microsoft background and Microsoft Cloud background check upon hire or transfer and every two years thereafter.

Nice To Haves

• Bachelor’s degree and 12+ years of experience in engineering, product or technical program management, data analysis, or product development, or equivalent experience.
• At least 4 years of people management experience.
• At least 8 years of experience managing cross-functional and/or cross-team projects.
• At least 1 year of experience reading and/or writing code, such as sample documentation or product demos.
• Experience leading large, technically complex programs across multiple teams with measurable results.
• Hands-on knowledge of public cloud infrastructure (Azure, AWS, or GCP) and security posture concepts such as configuration baselines, CSPM, and vulnerability or exposure management.
• Foundational understanding of security principles, threat modeling, applied cryptography, and security protocols.
• Experience running CSPM, CNAPP, or exposure management programs in a large or multi-tenant enterprise.
• Familiarity with CIS Benchmarks, NIST CSF, the Microsoft Cloud Security Benchmark, and attack-path-based risk prioritization.
• Track record of defining executive-level security metrics and driving remediation across many teams.
• Experience applying AI/LLM-based automation to security or engineering workflows.

Responsibilities

• Hire, coach, and develop a high-performing team of program managers and build an inclusive, accountable team culture.
• Set the vision, roadmap, and success metrics for exposure management across corporate and production tenants, including coverage, control definitions, scanner-tool portfolio, finding prioritization, and posture reporting.
• Lead cross-organizational programs, including onboarding tenants and resource types, near-real-time posture assessment, and consolidating security signals into a prioritized view.
• Work with Microsoft Security product teams to incorporate enterprise security requirements into product capabilities.
• Partner with engineering and service owners to drive remediation through scorecards, governance, and escalation while balancing security rigor with engineering cost and friction.
• Own OKRs, KPIs, executive reviews, and exception and risk-acceptance processes; ensure the underlying data is trustworthy.
• Explain complex technical risk to senior leaders and influence decisions across the company.
• Use AI and automation to accelerate control authoring, triage, and posture insights.

Benefits

• Certain roles may be eligible for benefits and other compensation; additional benefits and pay information is available on Microsoft’s careers website.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal