Program Manager Tech 4/ REDMOND, WA(Remote)- 9 months Contract

Title: Program Manager Tech 4 Location: REDMOND, WA(Remote) Duration;9+ months Contract Looking for EX-Microsoft employees This is a Remote Position. Typical Day in the Role • Purpose of the Team: The purpose of the Microsoft Privacy Group Program is to support the compliance org focusing on privacy and security compliance. • Key projects: This role will contribute towards helping identify gaps in the compliance space within Microsoft Security. This team is responsible for bringing all compliance silos together into a more cohesive unit. This person will assist with developing a program to help manage compliance before a new regulation goes into effect in January. • Typical task breakdown and operating rhythm: The role will consist of the following, 20-25% Meetings 30% following up for documentation purposes 20% collaboration/ reporting progress to team 30% reporting and detail analyze Compelling Story & Candidate Value Proposition • What makes this role interesting? - This role provides exposure to working with privacy and security related regulations, interacting with some of the best mind in the engineering and cyber security division at Microsoft. Will be working on the forefront of how Microsoft is helping customers meet their privacy obligations. Candidate Requirements • Years of Experience Required: 8-10 overall years of experience in the field. • Degrees or certifications required: Computer science, business with emphasis on information systems or finance. Any privacy CIPT CISSP or other industry certification is required to be eligible for this role. • Disqualifiers: Candidates without work experience within compliance, security or privacy capacity will not be eligible for the role. • Best vs. Average: The ideal resume would contain demonstrated experience with working in a compliance role, someone who has helped establish a compliance program, someone who is familiar with control frameworks, helping achieve ISO certifications. • Performance Indicators: Performance will be assessed based on quality of work. Which will be measured based on their level of professionalism, growth mindset, ability to show curiosity, willingness to learn and not afraid to ask questions, as well as their ability to be a team player. Top 3 Hard Skills Required + Years of Experience 1. Minimum 8-10 years experience with experience within a Big 4; basic auditing functions 2. Minimum 8-10 years experience with compliance management 3. Minimum 8-10 years experience with cyber security Hard Skills Assessments • Expected Dates that Hard Skills Assessments will be scheduled: ASAP • Hard Skills Assessment Process: The assessment process will include 2 rounds, 45-60minutes • Required Candidate Preparation: Candidates should have general preparedness prior to the assessment. Summary: This project aims at identifying and documenting the necessary components for establishing a sustainable compliance program across Microsoft Security (MSec). Using the new program, assess and document compliance with the Digital Operational Resilience Act (DORA). The vendor will perform compliance activities, including working with services teams across MSec and partner Trust teams to collect evidence of compliance, document control gaps, and advise on remediation strategy in alignment with the company-wide DORA compliance framework. Scope of Work: 1. Controls Assessment: o Conduct a comprehensive assessment of existing controls to ensure they meet DORA requirements. o Identify gaps and recommend improvements to align with DORA standards. o Document the assessment process and findings. 2. Documentation: o Develop detailed documentation of compliance activities, including policies, procedures, and controls. o Ensure documentation is in line with DORA requirements and can be easily audited. o Provide templates and guidelines for ongoing compliance documentation. 3. Compliance Reporting: o Prepare regular compliance reports to track progress and highlight any issues. o Ensure reports are comprehensive and meet regulatory standards. o Present findings and recommendations to the compliance team. Deliverables: • Definition of compliance program components including framework, risk management, corrective action management, exception management, tooling, engagement model, etc... • Regular progress report on defining and establishing the compliance program components. • Assessment of existing controls and gaps to meet DORA compliance • Regular progress on compliance activities • Recommendations for improvements to meet DORA requirements.