Director, Privacy & Business Resilience

** Overview*
* The Trust and Integrity Protection (TrIP) organization enables Microsoft's Commercial Business to grow with trust by turning privacy/data protection, security, responsible AI, business resilience, and anti-corruption risk into clear business decisions, durable controls, and measurable outcomes.

We are looking for a strategic, high-impact leader to evolve the privacy, data protection, and business resilience program for one of Microsoft's largest global businesses spanning sales, consulting, and technical support. This leader will move the program beyond compliance execution to deliver proactive risk reduction, AI-enabled scale, audit-ready evidence, and confidence with customers, regulators, and executives.

+ Reduce privacy, data protection, and resilience risk across Microsoft's commercial operating model while enabling speed, customer trust, and responsible growth.

+ Modernize the program through AI, automation, telemetry, and scalable controls that improve quality, reduce friction, and strengthen audit readiness.

+ Create a federated operating model that connects divisional privacy teams into one coordinated, executive-ready view of risk, priorities, and progress.

+ Establish risk aggregation, KPIs, KRIs, and metrics that turn fragmented signals into actionable decisions for senior leaders.

+ Translate complex regulatory, customer, and audit expectations into crisp business guidance that teams can execute with confidence.

+ Represent Microsoft's commercial data protection posture with credibility to customers, regulators, auditors, legal partners, and executives.

The ideal candidate is a builder, operator, and thought leader: someone who combines privacy depth, business judgment, executive presence, and transformation to create a program that is resilient, measurable, and built to last.

This leader will create clarity in ambiguity, develop talent, and build trusted partnerships that help the business move faster with greater confidence.

Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

   

** Responsibilities*
* ** Build a high-impact team*
* + Build and lead a high-performing team known for sound judgment, customer empathy, risk discipline, and measurable impact.

+ Set clear priorities and accountability, develop exceptional talent, and empower the team to make smart tradeoffs and execute with speed.

** Enable the business while reducing risk*
* + Lead an integrated, risk-based privacy, data protection, and resilience program that protects data, earns trust, and enables the business to operate at global commercial scale.

+ Turn risk signals into clear priorities, pragmatic mitigation, and timely leadership decisions-strengthening accountability while reducing friction for sales, consulting, and support.

** Modernize and scale the program*
* + Set and deliver an AI-enabled transformation roadmap that simplifies work, improves evidence and risk visibility, and accelerates mitigation.

+ Use Microsoft technologies, automation, and lessons from regulatory change, customer expectations, and audits to build scalable controls and better business outcomes.

** Create one enterprise view of risk*
* + Lead a federated operating model with clear ownership, coordinated execution, and an enterprise view of risk posture, priorities, and progress.

+ Advise senior leaders with actionable business recommendations and represent a credible narrative for how Microsoft protects data while enabling global sales, consulting, and support.

** Qualifications*
* ** Required Qualifications*
* + Master's Degree in Risk Management, Engineering, Government Intelligence, Security, or Information Technology, AND 6+ years experience in risk management, privacy, security, compliance, intelligence, operations, auditing, and/or finance OR Bachelor's Degree in Risk Management, Engineering, Government Intelligence, Security, or Information Technology, or related field AND 8+ years experience in risk management, privacy, security, compliance, government intelligence, operations, auditing, and/or finance OR equivalent experience.

** Preferred Qualifications*
* + Master's Degree in Risk Management, Engineering, Government Intelligence, Security, or Information Technology, or related field AND 12+ years experience in Risk Management in the context of Operations, Engineering, Information Technology, Business Analyst, Consulting, Auditing, Privacy, Security, Compliance, Government Intelligence, and/or Finance OR Bachelor's Degree in Risk Management, Engineering, Government Intelligence, Security, Cybersecurity, or Information Technology, or related field AND 15+ years experience in risk management in the context of operations,…