below marketmost similar roles pay hereabove market
This role pays less than
70%
of similar roles. Most pay
$177,250–$216,000
— the blue band above.
At the midpoint, this role pays about
$177k
versus about
$197k
for comparable roles.
Based on 240 similar postings.
Employer
About Microsoft
Microsoft Corporation is a global technology leader producing software, hardware, and cloud services including Windows, Office 365, Azure cloud platform, Xbox gaming, and Surface devices. Industry: Software & Cloud Computing
Microsoft currently has
648 open roles
on FindRole.
Listed pay typically runs
$119,800–$234,700
across 624 roles with salary data.
The Senior Product Manager - Security & Compliance joins the Windows Trust Experiences & Compliance team to define the vision, strategy, and roadmap for security and compliance capabilities across the Windows ecosystem. This role involves identifying security gaps, translating complex regulatory requirements into scalable platform capabilities, and driving investment priorities for secure-by-design and AI-enabled features. The successful candidate will serve as a technical security SME, influencing architecture and engineering decisions across platforms, services, and secure software supply chains. Key responsibilities include managing product requirements for build infrastructure, release systems, and signing services while ensuring readiness for frameworks like EU CRA, FedRAMP, FIPS, and PQC/CNSA. The role requires expertise in threat modeling, vulnerability management, and security assurance principles to strengthen the overall Windows security posture.
What does a Product Manager earn?
Median $199625 from 738 postings across 94 companies.
Own the vision, strategy, roadmap, and investment priorities for Windows security compliance and assurance capabilities.
Serve as a Security SME to advise on platform, services, infrastructure, and secure software supply chain domains.
Identify security and compliance gaps and define product investments to improve Windows security posture and regulatory readiness.
Translate complex security, customer, and regulatory requirements into scalable platform capabilities and engineering investments.
Partner with engineering teams to design and deliver secure-by-design and AI-enabled capabilities for governance and audit readiness.
Influence architecture and engineering decisions across Windows products, build infrastructure, release systems, and signing systems.
Drive security assurance and compliance readiness for frameworks such as FedRAMP, FIPS, and the Cybersecurity EO.
Define success metrics and use data-driven insights to drive adoption and continuous improvement in trust and auditability.
What we're looking for
Bachelor's Degree and 5+ years of experience in product/service/program management or software development, or equivalent experience.
6+ years of experience in Product Management, Security Engineering, Security Architecture, Technical Program Management, or related fields (preferred).
Solid technical expertise in platform, services, application, and infrastructure security, including CI/CD, secure software supply chains, and AI/ML environments (preferred).
Experience driving product strategy, roadmap development, and execution for security, platform, infrastructure, or developer-focused capabilities (preferred).
Ability to serve as a trusted Security SME to influence architecture, product strategy, and engineering priorities across complex technical domains (preferred).
Experience leading cross-functional initiatives involving engineering, security, compliance, and executive stakeholders (preferred).
Solid knowledge of security architecture, secure development practices, threat modeling, vulnerability management, and security assurance principles (preferred).
Familiarity with EU CRA, Cybersecurity EO, NIST, FedRAMP, FIPS, PQC/CNSA, or similar security and regulatory frameworks (preferred).