Principal Security Program Manager - Windows Servicing and Delivery

Define and drive the vision, strategy, and execution of complex Windows security programs, including continuous compliance, security response, vulnerability remediation, and regulatory readiness. Partner with engineering and security leaders to translate emerging threats and security requirements into prioritized investments, product requirements, and architecture proposals.

Lead cross-organizational programs with clear milestones, ownership, and success measures; manage dependencies, schedules, risks, and issues through resolution. Improve security processes and operating rhythms to strengthen accountability, reduce missed commitments, and focus teams on the highest-impact risks. Partner with engineering and tooling teams to deliver automation, analytics, dashboards, and AI-enabled workflows that improve security reviews, risk visibility, data quality, and operational efficiency.

Communicate program vision, status, risks, and trade-offs to technical and executive audiences, building alignment and trust across organizations. Drive clear, timely communication and adoption as security policies, processes, and tools change.

Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection OR Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 4+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection OR equivalent experience. 8+ years of product management or equivalent experience shipping enterprise platform or infrastructure products.

Experience in operating-system, platform, or product security; knowledge of Windows internals and security technologies such as the kernel, authentication, update mechanisms, firmware, boot processes, TPM, identity, or cryptography. Track record of calmly managing critical security incidents or rapid-response situations. Experience defining product roadmaps or multi-year technical strategy and driving defense-in-depth improvements.

Experience applying generative AI across product management workflows, from research and analysis through prototyping, or delivering AI-enabled security and automation capabilities. Solid analytical, risk-assessment, and mitigation-planning skills, with attention to detail. Excellent communication and executive presentation skills for technical and non-technical audiences.

Proven ability to lead large, ambiguous programs and deliver results across multiple organizations and stakeholders.