Senior Technical Program Manager

Overview Microsoft is a company where passionate innovators come to collaborate, envision what can be and take their careers to levels they cannot achieve anywhere else. The Copilot, Agents, and Platform (CAP) organization powers mission-critical Microsoft 365 and Dynamics 365 services, including BizChat, Work IQ, Agent 365, Cowork and the agent runtime for the next era of work.

The Trust Assurance team within CAP helps customers rely on our business applications and agents. We are looking for a Senior Technical Program Manager to own privacy and compliance programs across this portfolio, from strategy through execution. You'll translate regulatory and internal requirements into clear decisions, durable controls and measurable outcomes.

You'll lead cross-team programs working with service teams across the portfolio and use AI and automation to change how compliance work gets done.

Success means delivering effective programs, identifying and reducing risks early, minimizing manual work for engineering teams, and providing evidence that leaders and auditors trust.

The ideal candidate combines privacy and compliance expertise with strong technical judgement. They bring clarity to ambiguous situations, influence senior stakeholders and simplify complex obligations into practical guidance while protecting data and earning trust.

Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

• Own the strategy and roadmap for privacy and compliance programs, defining scope, priorities and operating cadence across areas such as privacy reviews, certifications, data residency, and regulatory readiness for AI and agents.
• Own program effectiveness. Establish governance, controls, metrics and assurance mechanisms to demonstrate compliance with Microsoft standards and legal, regulatory and contractual requirements.
• Lead privacy and compliance risk management by identifying, assessing and prioritizing systemic and emerging risks, recommending practical mitigations, and working with accountable engineering owners to drive resolution.
• Partner with engineering and compliance experts to translate regulatory and control requirements, including SOC 2, ISO 27001, FedRAMP, PCI DSS and GDPR into scalable, testable automated checks with clear criteria for passing, failing and handling exceptions.
• Align privacy, legal (CELA), security, engineering and service-group champions around common standards and outcomes without relying on direct authority. Coordinate this work through a federated model.
• Modernize compliance workflows with AI automation that reasons over program and compliance status, risks, evidence and follow-ups, using AI assistants, tool-calling agents, retrieval-augmented workflows, and prompt and context engineering.
• Evaluate and monitor AI-assisted automation to measure its quality, reliability, safety and cost in practice rather than relying on assumptions.
• Lead audit and regulatory readiness by coordinating evidence, documentation and attestations for internal reviews, external audits and certifications.
• Support senior leaders’ decisions through program reviews and executive summaries that clarify risk posture, control effectiveness, regulatory changes and investment priorities.
• Strengthen practices across the organization by creating reusable playbooks and templates and mentoring TPMs and champions.
• Embody our culture and values.

Required Qualifications

• Bachelor's Degree AND 4+ years experience in engineering, product/technical program management, data analysis, or product development
• OR equivalent experience.

Other Requirements

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings:

• Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Preferred Qualifications

• Bachelor's Degree AND 8+ years experience engineering, product/technical program management, data analysis, or product development
• OR equivalent experience.
• 1+ year(s) of experience reading and/or writing code (e.g., sample documentation, product demos).
• 2+ years of experience managing cross-functional and/or cross-team projects.
• Extensive professional software engineering experience building and operating production systems at scale, with significant depth in privacy, compliance, security, and data protection.
• Demonstrated ability to translate privacy and regulatory requirements (such as GDPR or HIPAA) into technical designs and enforceable controls.
• Hands-on command of privacy and security fundamentals: privacy-by-design, data minimization, access-control models (RBAC/ABAC), encryption, audit logging, and data lifecycle management.
• Experience running privacy, compliance or regulatory programs for cloud or enterprise SaaS services, including control design, metrics, dashboards and audit readiness.
• Working knowledge of frameworks such as GDPR, SOC 2, ISO 27001, FedRAMP, PCI DSS or NIST 800-53, and privacy documentation such as DPIAs and records of processing.
• Experience with AI governance, Responsible AI, or privacy considerations for AI and agentic systems.
• Hands-on experience using AI assistants and agents (for example Copilot or Copilot Studio) to automate workflows and defining success metrics for them.
• Relevant certification such as IAPP (CIPP/CIPM/CIPT), ISACA (CISA/CRISC) or (ISC)².
• Familiarity with Microsoft 365, Dynamics 365, Power Platform, Copilot or comparable enterprise platforms, and engineering workflows such as SDLC, CI/CD and pull request reviews.
• Solid judgment and executive communication, including making complex risks clear and actionable for technical, legal and leadership audiences.

#CAP #Agent365 #A365

Technical Program Management IC4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $160,200 - $261,000 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:

https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer.

All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances.

If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.