New 
Operations Risk Manager
 Microsoft | |
 United States, Washington, Redmond | |
 Aug 22, 2025 | |
|
OverviewIf you love the pursuit of excellence and are inspired by the challenges that come through driving innovations thatimpacthow the world lives, works and plays, then we invite you to learn more about Microsoft Business Operations (MBO) - and the value we deliver across Microsoft and to our customers and partners. We offer unique opportunities to work on interesting global projects in an environment that appreciates diversity, focuses on talent development, and recognizes and rewardsgreat work. Operational Risk Management professionals enable business strategy through a programmatic and global approach to risk management, by methodologicallydetermining, assessing, managing andestablishingaccountability for the most critical risks facing the company. Microsoft has a sizable community of talented individuals in dedicated risk management roles whoare responsible formaking our businessobjectivesmore likely to be realized and to protect one of the world's most valuable brands.Operations is uniquely positioned within the company, supporting almost every product Microsoft offers which presents upstream and downstream dependencies. Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
ResponsibilitiesGovernance Utilizes knowledge of policies, laws, and regulations to make informed decisions independently, aligning with business needs. May interpret this information to safeguard Microsoft and its customers while advancing the business.Identifiesnon-conformance issues, escalates them to management, and adheres to program guidelines based on corporate policies. Determinesownership and accountability for key risks and mitigation activities with minimal guidance. Continuously reports on risk levels and updates accountability owners on their status. Assistsin presenting risk assessment information, detailing relevant behaviors, activities, processes, and associated risks to ensure stakeholder awareness, support, and approval. Controls Assesses end-to-end operational processes and dependencies for efficiency and effectiveness opportunities. Recommends process and control improvements (e.g., preventative/detective and automated/manual) to mature the control environment. Testcontrolstodeterminetheir effectiveness andidentifiesareas for improvement, offering design adjustment suggestions with minimal guidance. Collaborates with the team to define controls,identifypotential failure points, and ensure routine issues are addressed during the design process with minimal guidance. Conducts periodic reviews of existing controls to ensure theyremaineffective and relevant to the current riskenvironment. Providesfeedback on control performance and suggests enhancements to improve efficiency and effectiveness. Ensures that controls are aligned with industry standards and regulatory requirements,making adjustmentsas necessary to stay compliant. Consult/Advise/Educate Collaborates across teams to ensure consistent application and communication of regulations and standards, delivering training and beginning to take ownership of training aspects. Advises on compliance of products, processes, and programs. Educates teams on compliance requirements, reviewsresult, conducts informal assessments, andmonitorscompliance within specific areas. Translates compliance standards and processes into relatable formats for teams. Risk Assessment Executes the risk management lifecycle process andmethodfor smaller projects, including data collection and analysis. Gathers and analyzes relevant internal and external information, threat intelligence reports, and conducts interviews or focus groups toidentifyrisks, assess risk levels, and gatheradditionalcontext with guidance. Compiles information to understand job, project, or process risks and their root causes for routine projects. Scores risks and contributes to risk prioritization usingappropriate riskprofile scoring.Assistsin developing risk scorecards using weighted scores and risk management models with guidance. Risk Remediation Reviews risk governance to ensureappropriate attentionto specific risk areas with minimal guidance.Identifiesand escalates concerns related tomonitoredrisks. Drafts mitigation plans and processes, including risk registers and controls, helping accountability owners understand and implement plans to reduce risk with minimal guidance. Ensures alignment and agreement on risk reduction plans and processes, confirming accountability owners'capacityto drive mitigation efforts, and introduces necessary policy adjustments with minimal guidance. Coordinates across accountability owners to ensure proper tracking and trending of risk management activities. | |