Product Manager II

Microsoft•Redmond, WA

About The Position

The Trust Experiences and Compliance (TEC) team is focused on making Windows the most trusted platform for business and life by redefining how compliance is designed, implemented, and sustained. They are building innovative, AI-powered solutions that integrate into engineering workflows to reduce compliance toil, strengthen control effectiveness, and enable teams to build trusted products by default. The Compliance arm within TEC helps Windows + Devices teams ship innovative experiences responsibly by translating evolving internal policies, regulatory obligations, and customer expectations across Responsible AI, Privacy, and Data domains into clear product requirements, scalable review processes, durable controls, verifiable evidence, and timely release decisions. This role is for a Product Manager II to drive complex compliance programs across Windows + Devices, operating at the intersection of product development, engineering, privacy, data governance, responsible AI, trust, legal, safety, security, regulatory, and audit readiness. The candidate will guide teams from requirements to design decisions, privacy and data assessments, responsible AI reviews, risk mitigation, approvals, and continuous compliance, while maintaining product velocity, customer control, and trust. The role involves owning cross-functional programs such as privacy reviews, Responsible AI system and model reviews, data governance, consent and data-use controls, diagnostic and required service data, access governance, data portability, transparency documentation, release readiness, regulatory implementation, and audit evidence. The goal is to create durable operating models that clarify obligations, define ownership, ensure traceable decisions, and automate compliance within the engineering lifecycle. The regulatory scope includes GDPR, Digital Markets Act, EU Data Act, Executive Order 14117, EU AI Act, California AI Transparency Act, South Korea AI Act, Colorado AI Act, and other global requirements. Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees, they foster a growth mindset, innovate to empower others, and collaborate to achieve shared goals, guided by values of respect, integrity, and accountability to create an inclusive culture.

Requirements

Bachelor's Degree AND 2+ years experience in product/service/program management or software development. OR equivalent experience.
Demonstrated ability to drive complex, ambiguous programs across engineering, legal, policy, privacy, security, data platform, responsible AI, and business stakeholders.
Experience translating technical, policy, privacy, data-governance, AI, or regulatory requirements into executable product plans, controls, milestones, operating processes, and evidence.
Solid understanding of modern product and data lifecycles, including telemetry collection, cloud services, storage, data access, analytics, AI models, platform services, applications, agents, evaluation, monitoring, and release management.
Excellent written and verbal communication skills, including the ability to create executive-ready narratives, present trade-offs, document decisions, and drive timely alignment.
Demonstrated ability to challenge the status quo and streamline or transform processes to improve efficiency, scale, control effectiveness, and business impact.
Working knowledge of privacy, data governance, Responsible AI, and regulatory compliance programs, including assessments, reviews, controls, audit readiness, and supporting evidence.
Familiarity with regulations and frameworks such as GDPR, U.S. state privacy laws, the Digital Markets Act, the EU Data Act, Executive Order 14117, the EU AI Act, global AI transparency laws, ISO/IEC 42001, and the NIST AI Risk Management Framework.
Familiarity with AI models and systems, including capabilities, limitations, evaluation approaches, deployment patterns, provenance, watermarking, human oversight, and associated safety, privacy, and compliance considerations.
Ability to engage deeply with engineers, data scientists, researchers, and architects while communicating clearly with legal partners, executives, auditors, regulators, and customers.

Nice To Haves

Bachelor’s degree and significant experience in product or program management, software engineering, privacy, data governance, compliance, risk, policy, or a related discipline—or equivalent experience.

Responsibilities

Drive end-to-end compliance reviews for Windows applications, platform services, AI systems and models, data-processing scenarios, telemetry pipelines, connected experiences, and agentic solutions—from early scoping through approval, launch, and sustained operation.
Guide product teams through privacy assessments, system registration, impact and release assessments, data classification, purpose and legal-basis analysis, risk evaluation, testing plans, evidence collection, mitigation closure, and documented out-of-scope decisions.
Partner with CELA, Privacy, the Office of Responsible AI, central regulatory programs, data platform teams, and engineering organizations to interpret new policies and laws and translate them into actionable Windows requirements, surface gaps early and establish clear owners, dates, decisions, and escalation paths.
Drive creation, review, publication, and lifecycle maintenance of privacy disclosures, data documentation, application cards, platform cards, model cards, compliance reports, and other customer- or regulator-facing artifacts.