Risk Management Manager

Build a high-performing team 

• Build and lead a team known for business judgment, risk discipline, customer empathy, and measurable impact. 

• Create clarity on priorities, ownership, and outcomes so the team can make smart tradeoffs and execute with pace. 

• Develop talent and an inclusive culture that raises the bar for accountability, collaboration, and continuous improvement. 

Reduce risk while enabling the business 

• Deliver a risk-based privacy, data protection, and resilience program that protects customer, partner, employee, and Microsoft data at commercial scale. 

• Turn assessments, incidents, audit issues, and control signals into prioritized risk themes, mitigation plans, and leadership decisions. 

• Strengthen accountability through high-quality DPIAs, ROPAs, evidence, risk acceptances, and mitigation tracking that can withstand internal and external scrutiny. 

• Connect privacy, resilience, continuity, incident response, and operational risk so teams manage obligations as one coherent business system. 

• Equip sales, consulting, support, and leadership teams with practical guidance that accelerates good decisions and reduces rework. 

Modernize the program through AI and automation 

• Build an AI-enabled transformation roadmap that reduces manual effort, improves evidence quality, and increases risk visibility. 

• Use Microsoft technologies such as Purview, Priva, agentic solutions, and automation to scale controls and accelerate mitigation. 

• Convert regulatory change, customer expectations, audit findings, and lessons learned into stronger controls, simpler workflows, and better business outcomes. 

Create one coordinated view of privacy risk 

• Connect divisional, corporate, legal, engineering, and business privacy teams into a federated model with clear ownership and coordinated execution. 

• Establish governance that surfaces the right risks, dependencies, decisions, and tradeoffs to the right leaders at the right time. 

• Build KPIs, KRIs, dashboards, and executive reporting that show risk posture, program health, mitigation progress, and emerging themes. 

• Advise senior leaders with crisp business implications and recommendations, not compliance jargon. 

• Represent the program externally and internally with a clear, credible narrative for how Microsoft protects data across global sales, consulting, and support. 

• • OR bachelor’s degree and 6+ years of experience in risk management, privacy, data protection, security, compliance, audit, operations, finance, government intelligence, or related fields. 

• • OR equivalent experience. 

Preferred Qualifications 

• Proven ability to lead privacy, data protection, business resilience, or risk programs in a large, matrixed, global technology or services business. 

• Track record modernizing risk or compliance programs through AI, automation, telemetry, simplification, and scalable controls. 

• CIPP, CIPM, CIPT, or equivalent privacy, security, audit, risk, or resilience certification, or membership with a relevant risk domain association such as IAPP, (ISC)², ISACA, CIA, SCCE, DRI, CBCP, COSO, or IIA.

• Strong command of global privacy and data protection obligations, accountability frameworks, privacy by design, and data governance, with experience building risk aggregation mechanisms, metrics, dashboards, and executive reporting that drive leadership action 

• Experience creating risk aggregation mechanisms, metrics, dashboards, and executive reporting that drive leadership action. 

• Ability to align distributed teams in a federated model and drive consistent outcomes without relying on direct authority. 

• Credibility with customers, regulators, auditors, legal teams, engineering teams, and senior business stakeholders. 

• Excellent judgment, executive presence, communication skills, and ability to create structure and momentum in ambiguity.