Incident Response Program Manager
Overview:
In this role you will coordinate and manage security incident responses for Microsoft's commercial business. You will work with privacy, legal, security, engineering, and business teams to triage, contain, investigate, and resolve high-priority incidents, while driving governance, documentation, and action tracking. You'll enhance readiness, runbooks, and metrics, and help translate findings into practical improvements. This is a hands-on, cross-functional role that blends security expertise with program management in a global, fast-moving environment.
Responsibilities:
- Protect customers and business by coordinating containment and regulatory/commercial considerations
- Coordinate incident response across privacy, legal, security, engineering, and customer-facing stakeholders
- Drive end-to-end incident lifecycle: triage, containment, investigation, remediation, evidence collection, and closure
- Maintain audit-ready incident records and ensure progress on actions and dependencies
- Improve incident-response operations via runbooks, metrics, dashboards, and post-incident reviews
- Build strong partnerships with cross-functional teams and vendors while ensuring governance and accountability
- Support AI-related incident-response automations and controlled use of automation technologies
Key requirements:
Bachelor's Degree and 2+ years in engineering, technical program management, data analysis, or product development, or equivalent experience 1+ year of cross-functional or cross-team project management Hands-on incident responder and technical program manager with strong communication and operational disciplineclear written and verbal communicationability to work through ambiguitystakeholder management and collaboration ServiceNow or similar incident/case-management platformsdevelopment or improvement of runbooks, escalation paths, metrics, dashboardsautomation within incident-response and production environments