Principal Security Program Manager - Windows Servicing and Delivery

Overview

Join Microsoft's Windows Servicing and Delivery (WSD) Organization and help advance Windows security. WSD delivers servicing experiences that help keep consumer and enterprise customers protected and productive. Our teams work across engineering, security, communications, and support to strengthen Windows security and respond to evolving threats.

As a Principal Security Program Manager, you will lead cross-organizational programs that turn security priorities into strategy, durable processes, and measurable engineering outcomes. You will partner with technical leaders to translate threats and operational needs into prioritized investments, improve risk visibility, and scale security work through data, automation, and Artificial Intelligence (AI). This role offers the opportunity to influence Windows security direction and deliver impact across engineering and security organizations.

At Microsoft, our mission-to empower every person and every organization on the planet to achieve more-guides how we partner with customers to deliver trusted, impactful solutions. With a growth mindset culture, we innovate responsibly and measure success by shared progress-people, teams, and customers. Join us to do meaningful work that changes the world and helps shape what's next for everyone.

Responsibilities

• Define and drive the vision, strategy, and execution of complex Windows security programs, including continuous compliance, security response, vulnerability remediation, and regulatory readiness.
• Partner with engineering and security leaders to translate emerging threats and security requirements into prioritized investments, product requirements, and architecture proposals.
• Lead cross-organizational programs with clear milestones, ownership, and success measures; manage dependencies, schedules, risks, and issues through resolution.
• Improve security processes and operating rhythms to strengthen accountability, reduce missed commitments, and focus teams on the highest-impact risks.
• Partner with engineering and tooling teams to deliver automation, analytics, dashboards, and AI-enabled workflows that improve security reviews, risk visibility, data quality, and operational efficiency.
• Communicate program vision, status, risks, and trade-offs to technical and executive audiences, building alignment and trust across organizations.
• Drive clear, timely communication and adoption as security policies, processes, and tools change.

Qualifications

Required Qualifications

• Bachelors Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection
• OR Masters Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 4+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection
• OR equivalent experience.

Other Requirements

• Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings:
• Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Preferred Qualifications

• 8+ years of product management or equivalent experience shipping enterprise platform or infrastructure products.
• Experience in operating-system, platform, or product security; knowledge of Windows internals and security technologies such as the kernel, authentication, update mechanisms, firmware, boot processes, TPM, identity, or cryptography.
• Track record of calmly managing critical security incidents or rapid-response situations.
• Experience defining product roadmaps or multi-year technical strategy and driving defense-in-depth improvements.
• Experience applying generative AI across product management workflows, from research and analysis through prototyping, or delivering AI-enabled security and automation capabilities.
• Solid analytical, risk-assessment, and mitigation-planning skills, with attention to detail.
• Excellent communication and executive presentation skills for technical and non-technical audiences.
• Proven ability to lead large, ambiguous programs and deliver results across multiple organizations and stakeholders.

#W+DJOBS

#wsd

#wsdjobs

Security Assurance IC5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:

https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.