Senior Compliance Manager

Microsoft•Redmond, WA

About The Position

The FinOps Controls & Compliance (C&C) team enables the business to move quickly while maintaining trust, accountability, and compliance. We partner across Finance, Procurement, Operations, Engineering, and Corporate Functions to design, implement, monitor, and continuously improve controls that mitigate risk and support Microsoft's strategic priorities. We are seeking an experienced Controls & Compliance Manager to lead and enhance control and compliance programs across Finance and operational processes, with a strong emphasis on SOX compliance, Information Technology General Controls (ITGCs), risk management, and governance of emerging technologies including AI-enabled business processes and automation. This role will serve as a trusted advisor to stakeholders who are leveraging automation and AI to transform business operations, helping ensure solutions are implemented responsibly, risks are appropriately managed, and controls remain effective in an evolving technology environment. The ideal candidate brings deep expertise in SOX and internal controls, experience with ITGCs and automated controls, and the ability to partner across business and technical teams to enable innovation while maintaining a strong compliance posture.

Requirements

Bachelor's Degree in Business, Operations, Finance, or related field AND 4+ years experience in program management, process management, or process improvement OR equivalent experience.

Nice To Haves

5+ years of experience in SOX, internal audit, external audit, compliance, risk management, or internal controls.
Demonstrated experience with SOX frameworks, control testing, remediation management, and audit support.
Experience supporting or assessing Information Technology General Controls (ITGCs).
Understanding of automated controls, systems governance, and technology risk management.
Proven ability to manage complex cross-functional initiatives and influence stakeholders without direct authority.
Strong analytical, communication, and problem-solving skills.
CPA, CIA, CISA, CRISC, or equivalent certification.
Experience with enterprise technologies such as ERP platforms, workflow automation tools, AI-enabled solutions, and governance-risk-compliance (GRC) platforms.
Experience evaluating controls related to automation, machine learning, artificial intelligence, and digital transformation initiatives.
Experience with continuous controls monitoring, data analytics, and control automation.
Experience operating in a large, global, publicly traded company environment.

Responsibilities

Lead the design, implementation, documentation, testing, and monitoring of SOX controls across financial and operational processes.
Oversee compliance activities related to Information Technology General Controls (ITGCs), including access management, change management, system operations, and related governance processes.
Partner with control owners to ensure controls are appropriately designed and operating effectively.
Evaluate control deficiencies and drive remediation plans through successful closure.
Support internal and external audit activities, including audit readiness, testing coordination, and issue management.
Assess the adequacy of controls over automated business processes and system-generated reporting.
Partner with business leaders, engineering teams, and process owners to evaluate risks and control considerations associated with AI-enabled solutions, automation initiatives, and digital transformation efforts.
Advise stakeholders on control design and governance requirements as business processes evolve through automation and AI adoption.
Assess impacts to SOX and compliance programs resulting from changes in technology, automated decision-making, and emerging tools.
Promote compliance-by-design principles that integrate governance, controls, risk management, and accountability into AI and automation initiatives.
Identify opportunities to leverage technology, analytics, and automation to improve compliance effectiveness and efficiency.
Conduct risk assessments to identify emerging operational, technology, financial, compliance, and regulatory risks.
Develop and maintain risk mitigation strategies and monitoring activities.
Analyze control performance, exceptions, and trends to proactively identify opportunities for improvement.
Support governance processes and reporting for compliance and risk management programs.
Build strong partnerships across Finance, Procurement, Engineering, Internal Audit, Legal, and Compliance organizations.
Provide consultative guidance on controls, risk management, and governance requirements for new business initiatives and technology implementations.
Influence stakeholders to adopt scalable, sustainable control solutions that appropriately balance risk mitigation and business agility.
Communicate complex compliance, technology, and risk topics to both technical and non-technical audiences.
Lead complex, cross-functional compliance and controls initiatives from strategy through execution.
Develop executive-ready reporting, dashboards, and insights on control effectiveness, audit outcomes, risk trends, and compliance performance.
Drive continuous improvement and standardization efforts across compliance programs.