Senior Security Program Manager

Job description

Microsoft’s Health and Life Sciences (HLS) team is dedicated to empowering healthcare organizations to achieve their goals and improve patient care.

We aim to create an efficient and connected healthcare ecosystem built on the Microsoft Cloud, empowering everyone across the healthcare journey to collaborate, communicate, and innovate together to provide better experiences for clinicians, staff, and patients.

We are looking to hire a **Senior Security Program Manager** to join our team.

This is an opportunity to join a growing organization focused on healthcare-specific data platforms, AI products, and Microsoft Cloud for Healthcare.

We are looking for someone who will bring security, compliance, and regulatory expertise with a focus on healthcare to our team.

The right candidate will be a colleague who will partner with engineering, business, and legal teams to help navigate the complexities of healthcare security and regulation requirements.

We are a team that believes in making a difference and bringing a positive approach to challenges.

If you are looking for a team that will have an impact on an evolving society, provide a diverse workplace, and challenge you to learn and grow, our team may be the place for you.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more.

As employees, we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals.

Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

**Responsibilities**

This role will be vital to our Microsoft’s Health and Life Sciences (HLS) Trust and Safety team, bringing experience in security and regulatory project management to the group.

They will help develop programs, policies, and procedures to help our growing team navigate the complicated security environment of healthcare systems.

Responsibilities will include:

+ Collaborating with engineering and cross-company teams to develop effective and efficient programs to ensure healthcare specific security and compliance.
+ Work across teams to perform gap analyses, regulatory control monitoring, and develop tracking of new and existing obligations.
+ Anticipate and address security threats by gathering, analyzing, and evaluating information about existing, or potential threats to determine the likelihood of a Microsoft infrastructure, business, people, and assets, being targeted.
+ Monitor and manage the development of current, emerging, and evolving threats with the likelihood of impacting Microsoft infrastructure, business, people, and assets.
+ Facilitate discussions with internal and external program leaders to establish a strategic vision and service model to improve security operations.
+ Embody our culture (https://careers.microsoft.com/v2/global/en/culture) and values.

(https://www.microsoft.com/en-us/about/corporate-values)

**Qualifications**

**Minimum Qualifications:**

+ 4+ years experience in security program or program management or related field
+ OR equivalent experience.
+ Experience conducting security assessments such as Application Security, Threat Modelling, or Vulnerability Assessment, and the ability to assess risk and collaborate with engineering teams to develop remediation plans.
+ Demonstrate ability to define and track Objectives and Key Results (OKRs) and Key Performance Indicators (KPIs) to measure program performance, along with proficient project management skills.
+ Proficient communication and collaboration skills, with the ability to effectively interact with stakeholders at all levels of the organization.

**Other Requirements:**

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role.

These requirements include, but are not limited to, the following specialized security screenings:

+ Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

**Preferred Qualifications:**

+ Large-scale cloud background experience in Azure, AWS, Google, etc.
+ 5 + years of experience in cybersecurity assurance and program management Knowledge of Windows and/or Linux operating systems.
+ Threat modeling
+ Incident response
+ Proficiency in one or more programming/automation languages (e.g., C, C++, C#, Java, JavaScript, Python) or equivalent expertise.

Security IC4 - The typical base pay range for this role across the U.S. is USD $96,500 - $188,400 per year.

There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $123,500 - $206,400 per year.

Certain roles may be eligible for benefits and other compensation.

Find additional benefits and pay information here: US corporate pay information | Microsoft Careers (https://careers.microsoft.com/v2/global/en/us-corporate-pay.html)

Microsoft will accept applications for the role until October 30th, 2025.

#HLS #Health&LifeScience #MSCareerEvents25

Microsoft is an equal opportunity employer.

Consistent with applicable law, all qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances.

If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations (https://careers.microsoft.com/v2/global/en/accessibility.html) .

Required Skill Profession

Other General