{"id":4034121,"url":"https://alion.io/job/microsoft-senior-risk-compliance-engineer","title":"Senior Risk & Compliance Engineer","company":{"id":18,"name":"Microsoft","domain":"microsoft.com","url":"https://alion.io/company/microsoft","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Eightfold","truth_index":{"grade":"B","score":84,"open_postings":471,"ghost_share":0.006,"stale_share":0.597,"repost_share":0.04,"time_to_fill_p50_days":29,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Legal","role_family":"Legal","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sunnyvale, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":116900,"max":203600,"currency":"USD","period":"year","gross":null,"usd_annual":203600},"salary_estimate":null,"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":true},{"name":"PCI DSS","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-10-21T17:15:05Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T19:33:01Z","board_verified":true,"closed_at":null,"days_open":20,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":20},"description":"OverviewTeam Purpose\nThe Microsoft AI Infrastructure Information Security Governance, Risk, Automation, Compliance, and Engineering team helps build and maintain a secure, scalable, and sustainable compliance environment. You will partner across security, engineering, legal, privacy, audit, and other teams to translate risk and compliance requirements into controls that can be implemented, monitored, and continuously improved. Together, the team connects requirements, risks, controls, evidence, and monitoring so compliance can scale with AI infrastructure, technology, and business needs.\nRole Summary\nAs a Senior Risk & Compliance Engineer in the Microsoft AI Infrastructure Information Security team, you will independently own defined security risk and compliance areas from initial onboarding and risk assessment through control design, implementation partnership, assurance, continuous monitoring, and improvement. You will interpret regulatory, policy, customer, and assurance requirements; translate them into practical control objectives; evaluate implementation across complex technical systems; and drive remediation of identified gaps. You will also use data, telemetry, evidence pipelines, and automation to provide ongoing visibility into control health and help make compliance audit-ready by default.\nThis opportunity will allow you to deepen your technical risk and compliance expertise, advance continuous controls monitoring and compliance automation, and expand your influence across security, engineering, and assurance teams.\nMicrosoft Culture Statement\nMicrosoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond\nResponsibilities\nResponsibilities\nIndependently manage defined security compliance areas through the end-to-end lifecycle, evaluate applicable laws, regulations, policies, customer commitments, and assurance requirements, and map them to risks, control objectives, controls, systems, evidence, and accountable owners.\n\nDevelop strategies and processes for compliance programs, use judgment to anticipate new focus areas as the regulatory, product, technology, and threat landscape evolves, and identify and escalate material non-conformance through appropriate governance channels.\n\nPartner with security and engineering teams to define practical, measurable, and testable controls; identify potential failure points; integrate secure-by-design practices; and establish clear ownership, evidence, monitoring, and remediation requirements.\n\nAnalyze system architecture, data flows, configurations, access models, logs, telemetry, scripts, queries, code, and other technical artifacts to assess control design and implementation and identify compliance or coverage gaps.\n\nIndependently test control effectiveness, conduct readiness assessments, use judgment to identify improvements, and work with stakeholders to remediate gaps, address root causes, track issues through closure, and support incidents when needed.\n\nConduct routine and complex internal assessments and audits, prepare teams for external reviews, and support certifications, audits, and regulatory requirements with reliable, reusable, and defensible evidence and documentation.\n\nTranslate control criteria into measurable monitoring requirements and use system-generated data, dashboards, telemetry, logs, configurations, and other signals to monitor control execution, exceptions, and health.\n\nDevelop requirements for internal tools, automated evidence collection, reusable monitoring, and compliance systems of record that reduce manual work, improve quality, and transition programs from point-in-time assessment to continuous controls monitoring.\n\nUse approved AI-enabled tools to improve compliance research, drafting, evidence review, and reporting while validating outputs through subject-matter review and traceability to authoritative sources.\n\nEducate teams on compliance requirements, translate standards and processes for technical and non-technical audiences, collaborate across teams to apply requirements consistently, and serve as a liaison among security, engineering, legal, privacy, audit, and business stakeholders.\n\nDevelop and report compliance metrics, key performance indicators, control health, audit issues, remediation progress, and risk trends for internal and external audiences, incorporating relevant customer feedback into program improvements.\n\nEmbody our culture and values\n\nQualifications\nRequired Qualifications\nBachelor's Degree in Legal, Finance, Science, Business, Engineering, or related field AND 6+ years experience in business, legal/regulatory, compliance, audit/consulting firm\nOR equivalent experience.\n\nOther Qualifications\nAbility to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:\nMicrosoft Cloud Background Check:\n- This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.\nPreferred Qualifications\nJuris Doctor (JD) Degree AND 7+ years experience in business, legal/regulatory, compliance, audit/consulting firm\nOR Master's Degree in Legal, Finance, Science, Business, Engineering, or related field AND 8+ years experience in business, legal/regulatory, compliance, audit/consulting firm\n\nOR Bachelor's Degree in Legal, Finance, Science, Business, Engineering, or related field AND 12+ years experience in business, legal/regulatory, compliance, audit/consulting firm\n\nOR equivalent experience.\n\nRelevant Certification (e.g., International Organization for Standardization [ISO] Lead Auditor, Certified Information Systems Auditor, Certified Information Systems Security Professional, Certified Public Accountant [CPA], Certified Information Privacy Professional [CIPP]).\n\nExperience translating regulatory, policy, security, or assurance requirements into technical controls and assessing control design, implementation, effectiveness, and evidence.\n\nExperience with security and assurance frameworks such as ISO 27001, Service Organization Control 2 (SOC 2), Payment Card Industry Data Security Standard (PCI DSS), National Institute of Standards and Technology (NIST) frameworks, or comparable regulatory and industry standards.\n\nExperience using data, telemetry, dashboards, automated workflows, evidence pipelines, governance, risk, and compliance systems, or systems of record to evaluate control health and support audits.\n\nTechnical risk or compliance experience across areas such as identity and access management, application security, cloud and infrastructure security, vulnerability management, data protection, security operations, resilience, software supply-chain security, third-party security, or AI security.\n\nAbility to identify systemic patterns across control gaps and findings, translate them into scalable technical or process improvements, and communicate risks and remediation needs clearly across technical and non-technical audiences.\n\nCompliance IC5 - The typical base pay range for this role across the U.S. is USD $116,900 - $203,600 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $148,400 - $222,600 per year.\nCertain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:\nhttps://careers.microsoft.com/us/en/us-corporate-pay\nThis position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.\nMicrosoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.","description_format":"text","description_chars":8785,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Platforms (IaaS & PaaS)","Office & Productivity Software","Gaming Consoles","Developer Tools"],"lifecycle":[{"event":"open","at":"2026-11-10T19:33:01Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 6,957 · green card filings: 2,767","filings_12m":6957,"filings_prev_12m":10319,"green_card_filings_12m":2767,"median_offered_wage_usd":167541,"route":null,"cap_exempt":false,"checked_at":"2026-11-10T11:34:35+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":76,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.84,"p_room":0.9,"age_days":20,"expected_fill_days":29,"reasons":["conf:1","win:mid","comp:brand"],"computed_at":"2026-11-10T21:20:09Z"},"pay":{"stated_usd_annual":203600,"is_top_pay":true},"html_url":"https://alion.io/job/microsoft-senior-risk-compliance-engineer","json_url":"https://alion.io/job/microsoft-senior-risk-compliance-engineer.json","meta":{"generated_at":"2026-11-10T21:20:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14959,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":18},"rest":"https://alion.io/mcp/rest/get_company?id=18"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmicrosoft-senior-risk-compliance-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmicrosoft-senior-risk-compliance-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmicrosoft-senior-risk-compliance-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/microsoft-senior-risk-compliance-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmicrosoft-senior-risk-compliance-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4034121}},{"tool":"search_jobs","arguments":{"company":"microsoft.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4034121},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}