Senior Technical Program Manager
About The Position
Microsoft’s Copilot, Agents, and Platform (CAP) organization powers mission-critical Microsoft 365 and Dynamics 365 services, including BizChat, Work IQ, Agent 365, Cowork, and the agent runtime. The Trust Assurance team helps customers rely on these business applications and agents. The Senior Technical Program Manager owns privacy and compliance programs across the portfolio, from strategy through execution, translating regulatory and internal requirements into clear decisions, durable controls, and measurable outcomes. The role leads cross-team programs with service teams and uses AI and automation to modernize compliance work. Success means delivering effective programs, identifying and reducing risks early, minimizing manual work for engineering teams, and providing evidence trusted by leaders and auditors. The ideal candidate combines privacy and compliance expertise with technical judgment, brings clarity to ambiguity, influences senior stakeholders, and turns complex obligations into practical guidance while protecting data and earning trust.
Requirements
- Bachelor’s degree and 4+ years of experience in engineering, product/technical program management, data analysis, or product development, or equivalent experience.
- Ability to meet Microsoft, customer, and/or government security screening requirements, including passing the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.
Nice To Haves
- Bachelor’s degree and 8+ years of experience in engineering, product/technical program management, data analysis, or product development, or equivalent experience.
- 1+ year of experience reading and/or writing code, such as for sample documentation or product demos.
- 2+ years of experience managing cross-functional and/or cross-team projects.
- Extensive professional software engineering experience building and operating production systems at scale, with significant depth in privacy, compliance, security, and data protection.
- Demonstrated ability to translate privacy and regulatory requirements, such as GDPR or HIPAA, into technical designs and enforceable controls.
- Hands-on knowledge of privacy and security fundamentals, including privacy-by-design, data minimization, RBAC/ABAC access-control models, encryption, audit logging, and data lifecycle management.
- Experience running privacy, compliance, or regulatory programs for cloud or enterprise SaaS services, including control design, metrics, dashboards, and audit readiness.
- Working knowledge of GDPR, SOC 2, ISO 27001, FedRAMP, PCI DSS, or NIST 800-53, and privacy documentation such as DPIAs and records of processing.
- Experience with AI governance, Responsible AI, or privacy considerations for AI and agentic systems.
- Hands-on experience using AI assistants and agents, such as Copilot or Copilot Studio, to automate workflows and define success metrics.
- Relevant certification such as IAPP (CIPP/CIPM/CIPT), ISACA (CISA/CRISC), or (ISC)².
- Familiarity with Microsoft 365, Dynamics 365, Power Platform, Copilot, or comparable enterprise platforms, and engineering workflows such as SDLC, CI/CD, and pull request reviews.
- Sound judgment and executive communication skills, including making complex risks clear and actionable for technical, legal, and leadership audiences.
Responsibilities
- Own the strategy and roadmap for privacy and compliance programs, setting scope, priorities, and operating cadence across privacy reviews, certifications, data residency, and regulatory readiness for AI and agents.
- Establish governance, controls, metrics, and assurance mechanisms to demonstrate compliance with Microsoft standards and legal, regulatory, and contractual requirements.
- Identify, assess, and prioritize systemic and emerging privacy and compliance risks; recommend practical mitigations and work with engineering owners to resolve them.
- Partner with engineering and compliance experts to translate requirements, including SOC 2, ISO 27001, FedRAMP, PCI DSS, and GDPR, into scalable, testable automated checks with clear pass, fail, and exception criteria.
- Align privacy, legal (CELA), security, engineering, and service-group champions around shared standards and outcomes through a federated model, without relying on direct authority.
- Modernize compliance workflows using AI automation that reasons over program and compliance status, risks, evidence, and follow-ups, including AI assistants, tool-calling agents, retrieval-augmented workflows, and prompt and context engineering.
- Evaluate and monitor AI-assisted automation for quality, reliability, safety, and cost in practice.
- Coordinate evidence, documentation, and attestations for internal reviews, external audits, and certifications.
- Support senior leaders’ decisions with program reviews and executive summaries covering risk posture, control effectiveness, regulatory changes, and investment priorities.
- Create reusable playbooks and templates and mentor TPMs and champions.
- Embody Microsoft’s culture and values.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
