Business Program Manager

Microsoft is on a mission to empower every person and every organization on the planet to achieve more. Our culture is centred on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. You can help us achieve our mission.

Do you want to work in a company that is transforming the world? How about working on cutting-edge issues, with world class clients and the support of a global community of professionals? If you are ready to work directly with business leaders and their teams to solve problems and drive change, then a career with the Microsoft National Security Team is for you.

The UK National Security Team (NST) is a small, high-impact group of security experts working at the intersection of compliance, technology, policy and business strategy. NST partners closely with sales, engineering, legal and business leaders to enable Microsoft’s most strategic customer opportunities while managing regulatory and reputational risk.

We have an immediate opening for a highly motivated and experienced Information Security Manager to join the NST, which sits within the UK & Ireland Legal Affairs team and National Security Team, and supports compliance with government personnel, project, information and facility-security requirements. The position is based at our offices in Reading and will report to a Principal Corporate Counsel in Legal Affairs.

Role Purpose:

The Information Security Manager is responsible for information security governance, assurance and operational security support across Microsoft UK Public Safety and National Security activities. The role helps ensure compliance with UK Government security policy, contractual obligations and customer security requirements.

The post holder acts as a trusted information security adviser to programme teams, engineering, sales, legal, security stakeholders and leadership. They translate complex regulatory and contractual security requirements into practical controls that enable secure, compliant delivery throughout the programme lifecycle.

A key priority is identifying security requirements early and reducing avoidable delivery friction without weakening compliance. This work supports customer confidence, programme delivery and revenue realisation by reducing the risk of contractual breaches, accreditation delays, security incidents and unplanned remediation.