Overview
The Microsoft Windows Security team is responsible for protecting billions of Windows devices by driving platform‑level security, risk reduction, and resilient-by-design engineering across the Windows ecosystem.
We are seeking a Principal Security Assurance Program Manager to lead our end‑to‑end security assurance effort including security compliance, risk assessment, and supporting our vulnerability research and security tooling efforts across Windows. This role sits at the intersection of platform security architecture, threat intelligence, vulnerability discovery, and execution, with broad influence across Windows engineering and other internal and external security assurance and research partners.
Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
Responsibilities
- Partner with engineering and product teams to ensure security requirements are met at scale, leveraging automation and scalable solutions.
- Translate requirements into actionable product requirements and security controls.
- Execute and evolve the security assurance process for Windows teams, enabling a scalable, risk-based approach that supports shared responsibility while ensuring consistent security review coverage and compliance.
- Lead cross-team security initiatives and coordination focused on deep security engagements, scalable security enforcement, scenario ownership, and integrated scanning solutions.
- Collaborate across teams to align priorities, deliverables, and milestones, ensuring security is embedded throughout the product lifecycle.
- Influence without authority by building solid partnerships across security engineering and partner teams, ensuring alignment on priorities, risks, and mitigation strategies.
- Navigate ambiguity and create clarity for broader organization.
- Deliver end-to-end execution on high-impact security efforts, from problem definition through implementation, tracking measurable outcomes and continuously improving processes.
Qualifications
Required Qualifications:
- Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in security or related field- OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 8+ years experience in security or related field
- OR equivalent experience.
Preferred Qualifications:
- Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 4+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection.- OR Bachelor's Degree in Statistics, Mathem
