National Security Officer

Responsibilities

• Partners on Microsoft’s Corporate, External, and Legal Affairs (CELA)-led projects with in-depth technical insights on critical infrastructure, digital sovereignty, economy, national data strategies and novel technologies. Contributes to policy shaping and influencing efforts. May provide ad hoc support to CELA Standards Team in their engagement with National Standards Bodies to accelerate local adoption of international standards.*†‡
• Engages regulator customers on strategic Corporate, External, and Legal Affairs (CELA)-led tech-policy topics as a trusted advisor. Contributes to the social impact programs of Microsoft. Establishes trust in Microsoft.*†‡
• Understands and leverages Microsoft business strategyto maximize inherent network effects between Microsoft’s long-term business objectives. Builds connections between technology, business, economy, policy, and society for regulators and customers.*‡
• Identifies, engages, and builds networks with relevant policy, advisory, industry, and standardization bodies on cutting-edge technologies, business transformation, and/or people and cultural changes. Establishes, produces, and expands Microsoft’s thought leadership in these domains. Leads or contributes to responsible use of technologies.*
• Guides and partners with Corporate, External, and Legal Affairs (CELA) in engagements with regulators on technical issues and organizational/societal impact relating to key priorities (e.g., data privacy, cybersecurity, sovereignty, and compliance).*‡
• Leads and/or partners with relevant internal and external teams on national cybersecurity policy projects and strategies. Anticipates and addresses potential risks for Microsoft during a major incident or crisis in an industry sector or country. Continuously anticipates and mitigates risks to avoid crisis in the future. Drives the orchestration of strategic CI and resilience projects. Be the point of contact for reporting cybersecurity breaches with appropriate government agencies aligned with India cybersecurity regulations*‡
• Works with Senior Leadership Team (SLT) on identifying and prioritizing strategic initiatives that are aligned with Microsoft agenda and the country to preserve for Microsoft the license to do business.*
• Builds a network with key and leading cybersecurity agencies and institutions in regulated industries, assuring digital trust. Identifies and builds networks with key external stakeholders to increase strategic cybersecurity/privacy resiliency for the country and key industry sectors.†
• Identifies, engages, and builds networks with senior security/privacy leaders in government and regulated industries to enable effective strategic risk management decisions and security/privacy/compliance roadmaps.†
• Leverages and acts as an influential member of an ecosystem of key cybersecurity/privacy influencers/professionals/startups/ISVs in the country. Drives the focus on security/privacy strategy, risk management and data/systems hygiene in critical sectors.†
• Assesses and anticipates implications of new legislations, regulations, and potential alignment with other organizations impacted. Contributes to future regulations by cultivating the trusted advisor status with government, regulators, and regulated industries.†

• Leads and/or partners with relevant teams on cybersecurity policy projects and strategies. Anticipates and addresses potential cybersecurity threats in an industry sector or country. Drives the orchestration of strategic cybersecurity recovery projects.†
• Oversees and orchestrates content and priorities related to technologies, cybersecurity, data sovereignty, or policies and regulations across the supported region. Provides resources, guidance, and external perspectives to Microsoft National Technology Officers (NTOs).‡
• Identifies, engages, and builds networks with relevant advisory, industry and standardization bodies on cloud, data, and artificial intelligence (AI). Establishes and expands Microsoft’s thought leadership in these domains. Drives the integration of those networks and the positive influence in the region.‡

Business Enablement

• Drives medium to long-term opportunities for Public Sector, all regulated industries, and/or other relevant industries. Anticipates and assesses the impact of current and upcoming technologies at the customer, industry, and/or country level. Creates a positive environment by contributing to the readiness of the country and expands Microsoft's market by addressing technologies, national sovereignty, security, privacy, or compliancy. Connects segments and industries to drive cross-industry market-making initiatives.*†‡
• Drives the engagement with internal (e.g., Corporate, External, and Legal Affairs [CELA], engineering) and external stakeholders (e.g., regulatory bodies, vocal customers) on strategic deals to assess and remove non-functional blockers related to compliance, security, privacy, etc.*†
• Supports the field to build internal/external capacity, including addressing and providing thought leadership on customer concerns on privacy, security, sovereignty, sustainability, AI, and other areas.*†‡
• Acts as the voice of the field to provide feedback to the product teams and foresees customer requests/needs, building business cases to advocate for and guide technology development/improvement.*†
• Proactively collaborates with corporate teams (e.g., Corporate, External, and Legal Affairs [CELA], Global Market Development, Research, and Engineering) to address unique opportunities and challenges in Public Sector and regulated industries.*‡
• To build trust and thought leadership, takes an agnostic perspective for both the industry and Microsoft. Creates a positive environment for the business and builds networks. Provides broad point of view across platforms as a trusted advisor to align the interests of both the industry and Microsoft. Translates and prioritizes corporate strategies for the local environment.*‡
• Works with engineering teams, compliance teams, and Corporate, External, and Legal Affairs (CELA) to keep existing and relevant local certifications valid. Addresses emerging local certifications, frameworks, and standards as needed.†
• Drives engagement with internal (e.g., Corporate, External, and Legal Affairs [CELA], industry teams, engineering) and external stakeholders (e.g., regulatory bodies, vocal customers) on strategic deals to assess and remove non-functional blockers related to compliance, security, privacy, etc. Coordinates activities with the global and/or regional National Technology Officers (NTOs) if the blockers are related to regional or international matters.‡
• Acts as the voice of the field to provide orchestrated feedback to the product teams, building policy impact analysis and business cases to advocate for and guide technology development/improvement.‡

Technical Intensity

• Partners with the country or area Senior Leadership Team (SLT) and external leadership teams as a member in the subsidiary or regional team. Discusses the technology landscape of the country or region as a technical thought leader. Advises and influences the SLT on high priority industry and technology trends.*†‡
• Acts as a spokesperson for Microsoft to build and maintain public relations. Gives speeches or addresses media coverage on technologies or security and privacy domains and their impact.*†‡
• Shares best practices with National Security Officers (NSO) National Technology Officers (NTOs) in other countries. Discusses legislation similarities/differences. Shares feedback and experiences to contribute to the NSO/NTO community. Develop and contribute to the growing body of knowledge in the NSO/NTO community by creating written artefacts (e.g., whitepapers, post mortems, best practices, thought leadership pieces). Leads mutual initiatives to work with other NSOs/NTOs.*†
• Promotes the demand for skills on new or upcoming technologies to ensure internal readiness, customer/partner skilling, and/or government elites. Identifies and leads advanced learning themes on identified thought leadership topics before programmatic internal material is available.*‡

• Identifies, engages, and builds networks with academic/research communities and/or higher education institutes to collaborate on market research, content of programs, and curriculum, and stay current on novel technologies. May drive the engagement with Microsoft Research community.*‡
• Acts as the internal and external security/privacy thought leader in the subsidiary. Leads security messaging direction for external outreach. Supports internal and external readiness on risk management, cybersecurity, privacy, and compliancy.†
• . Partner with a small team of other NTOs to produce highly relevant materials for the broader sales organization on complex issues spanning business, policy, and customer engagements (e.g., generative AI, post quantum cryptography, 5G, sovereignty). Aligns and orchestrates these projects with the worldwide NSO/NTO community lead for scale, consistency, and reach.‡

Subsidiary Leadership

• Provides internal and external feedback to other teams and drives culture in the technical community of the subsidiary as part of the subsidiary leadership team

Qualifications

Qualifications

Required/Minimum Qualifications

• Bachelor's Degree in Science, Technology, Engineering, Mathematics (STEM) or other related field AND 15+ years experience working across multiple disciplines/domains (e.g., technology management, consulting, policy and regulations, legal/privacy, or a related field)

• OR equivalent experience.

Additional or Preferred Qualifications

• Master's Degree or Doctorate Degree in a related field.
• 15+ years working across multiple disciplines/domains (e.g., security technology, legal/privacy).†
• Certification related to security (e.g., Certified Information Systems Security Professional).†
• 5+ years people/project management experience working with cross-functional teams.