New 
Privacy Risk Manager
 Microsoft | |
 United States, D.C., Washington | |
 Aug 06, 2025 | |
|
OverviewDo you see yourself as subject matter expert for enabling privacy of software/platforms for Microsoft's Federal program? Do you care about collaborating, networking, and evangelizing the future state of data privacy in the era of AI? Privacy, Resilience, Incident Response & Management, Accessibility (PRIMA) team is looking for a Privacy Risk Manager to undertake privacy assessment and mitigation activities, including platform privacy reviews to support the compliant deployment of applications for the MCAPS (Microsoft Commercial and Partner Solutions (MCAPS) Division Federal program. We are seeking a Privacy Risk Manager to join our team. MCAPS unifies the commercial go-to market organization to accelerate our progress, stay true to the Microsoft mission, and empower our customers, partners, people, and Microsoft's growth. Within MCAPS, TrIP (Trust and Integrity Protection) defines processes for customers' data protection including privacy, security, governance, risk, and compliance solutions, and provides guidance and oversight across the MCAPS division. In TrIP, the PRIMA Team is responsible for Privacy, data protection, Accessibility, Incident Response and Business Resiliency initiatives for the division. The successful candidate will:Perform critical activities, including technology privacy reviews.Respond to stakeholder queries on more complex privacy matters.Leverage a risk-based mindset to highlight risks and impacts.Possess technical aptitude and operational ability.Proficiency in program and project management, the ability to influence without authority, comfortability working in ambiguous and rapidly changing ecosystems, and clearly communicating the impact and scope of your work to partners and leadership are critical to success in this role. Our team values collaboration and proactive knowledge sharing to help support the entire team's growth. You will be expected to model Microsoft values and the One Microsoft culture in your behaviors and actions.
ResponsibilitiesPrivacy risk mitigationConduct in-depth privacy assessments on technology assets to ensure compliance with the Microsoft standards (including the Microsoft Privacy Standard) and contractual requirements, and proactively identify and interpret privacy risks, with a particular emphasis on systemic risks.Collaborate with subject matter experts (SMEs) to thoroughly document risks and recommend effective mitigations. Follow through to ensure implementation of mitigations.Promptly respond to stakeholder requests for guidance on data protection matters including collaborating with other domain SMEs across TrIP on the more complex enquiries. Using a risk-based approach, clearly document and communicate guidance, including restrictions or conditions, back to the requestor.Create and maintain a library of guidance documentation to enable stakeholder self-service of frequent requests.Stakeholder managementEstablish and maintain relationships with stakeholders from the Federal program as a trusted advisor.Independently present risk assessment information, detailing relevant behaviors, activities, or processes, and the associated risks to ensure awareness and support. Explain risk-related terms and concerns, connecting them to appropriate business areas.Surface risk insights on resource prioritization, root causes, risk identification, and top risk-related mitigations in relevant compliance forums.Collaborate with stakeholders to determine the best course of action and oversee implementation of controls.Controls and Data governanceReview US Federal government data protection requirements and contracts to ensure obligations are understood.Partner with the business to understand Federal offerings and ensure the necessary controls are in place to confirm compliance with those obligations.Where gaps are identified, create and implement the necessary controls.Create authoritative documentation and guidelines for managing Federal data.Approve all data access requests to Covered Unclassified Information to ensure appropriate access and use.Deliver results through teamworkEffectively collaborate with team members across TrIP, particularly the Responsible AI and Security teams, to ensure alignment on data protection best practices, tools, and implementation.Collaborate with other privacy groups where responsibility overlap is present and provide a seamless experience for the stakeholders. | |