Senior Technical Program Manager

Microsoft is a company where passionate innovators come to collaborate, envision what can be and take their careers to levels they cannot achieve anywhere else. The Copilot, Agents, and Platform (CAP) organization powers mission-critical Microsoft 365 and Dynamics 365 services, including BizChat, Work IQ, Agent 365, Cowork and the agent runtime for the next era of work. 

The Trust Assurance team within CAP helps customers rely on our business applications and agents. We are looking for a Senior Technical Program Manager to own privacy and compliance programs across this portfolio, from strategy through execution. You'll translate regulatory and internal requirements into clear decisions, durable controls and measurable outcomes. You'll lead cross-team programs working with service teams across the portfolio and use AI and automation to change how compliance work gets done. 

Success means delivering effective programs, identifying and reducing risks early, minimizing manual work for engineering teams, and providing evidence that leaders and auditors trust. 

The ideal candidate combines privacy and compliance expertise with strong technical judgement. They bring clarity to ambiguous situations, influence senior stakeholders and simplify complex obligations into practical guidance while protecting data and earning trust. 

Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. 

• Own the strategy and roadmap for privacy and compliance programs, defining scope, priorities and operating cadence across areas such as privacy reviews, certifications, data residency, and regulatory readiness for AI and agents. 

• Own program effectiveness. Establish governance, controls, metrics and assurance mechanisms to demonstrate compliance with Microsoft standards and legal, regulatory and contractual requirements. 

• Lead privacy and compliance risk management by identifying, assessing and prioritizing systemic and emerging risks, recommending practical mitigations, and working with accountable engineering owners to drive resolution. 

• Partner with engineering and compliance experts to translate regulatory and control requirements, including SOC 2, ISO 27001, FedRAMP, PCI DSS and GDPR into scalable, testable automated checks with clear criteria for passing, failing and handling exceptions. 

• Align privacy, legal (CELA), security, engineering and service-group champions around common standards and outcomes without relying on direct authority. Coordinate this work through a federated model. 

• Modernize compliance workflows with AI automation that reasons over program and compliance status, risks, evidence and follow-ups, using AI assistants, tool-calling agents, retrieval-augmented workflows, and prompt and context engineering. 

• Evaluate and monitor AI-assisted automation to measure its quality, reliability, safety and cost in practice rather than relying on assumptions. 

• Lead audit and regulatory readiness by coordinating evidence, documentation and attestations for internal reviews, external audits and certifications. 

• Support senior leaders’ decisions through program reviews and executive summaries that clarify risk posture, control effectiveness, regulatory changes and investment priorities. 

• Strengthen practices across the organization by creating reusable playbooks and templates and mentoring TPMs and champions. 

• Embody our culture and values. 

• Bachelor's Degree AND 4+ years experience in engineering, product/technical program management, data analysis, or product development
  • OR equivalent experience.

Other Requirements:

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings:

• Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.