OverviewThe FinOps Controls & Compliance (C&C) team enables the business to move quickly while maintaining trust, accountability, and compliance. We partner across Finance, Procurement, Operations, Engineering, and Corporate Functions to design, implement, monitor, and continuously improve controls that mitigate risk and support Microsoft's strategic priorities.
We are seeking an experienced Controls & Compliance Manager to lead and enhance control and compliance programs across Finance and operational processes, with a strong emphasis on SOX compliance, Information Technology General Controls (ITGCs), risk management, and governance of emerging technologies including AI-enabled business processes and automation.
This role will serve as a trusted advisor to stakeholders who are leveraging automation and AI to transform business operations, helping ensure solutions are implemented responsibly, risks are appropriately managed, and controls remain effective in an evolving technology environment.
The ideal candidate brings deep expertise in SOX and internal controls, experience with ITGCs and automated controls, and the ability to partner across business and technical teams to enable innovation while maintaining a strong compliance posture.
ResponsibilitiesSOX, ITGCs, and Internal Controls - Lead the design, implementation, documentation, testing, and monitoring of SOX controls across financial and operational processes.
- Oversee compliance activities related to Information Technology General Controls (ITGCs), including access management, change management, system operations, and related governance processes.
- Partner with control owners to ensure controls are appropriately designed and operating effectively.
- Evaluate control deficiencies and drive remediation plans through successful closure.
- Support internal and external audit activities, including audit readiness, testing coordination, and issue management.
- Assess the adequacy of controls over automated business processes and system-generated reporting.
AI, Automation, and Emerging Technology Governance - Partner with business leaders, engineering teams, and process owners to evaluate risks and control considerations associated with AI-enabled solutions, automation initiatives, and digital transformation efforts.
- Advise stakeholders on control design and governance requirements as business processes evolve through automation and AI adoption.
- Assess impacts to SOX and compliance programs resulting from changes in technology, automated decision-making, and emerging tools.
- Promote compliance-by-design principles that integrate governance, controls, risk management, and accountability into AI and automation initiatives.
- Identify opportunities to leverage technology, analytics, and automation to improve compliance effectiveness and efficiency.
Risk Management and Compliance - Conduct risk assessments to identify emerging operational, technology, financial, compliance, and regulatory risks.
- Develop and maintain risk mitigation strategies and monitoring activities.
- Analyze control performance, exceptions, and trends to proactively identify opportunities for improvement.
- Support governance processes and reporting for compliance and risk management programs.
Business Partnership and Influence - Build strong partnerships across Finance, Procurement, Engineering, Internal Audit, Legal, and Compliance organizations.
- Provide consultative guidance on controls, risk management, and governance requirements for new business initiatives and technology implementations.
- Influence stakeholders to adopt scalable, sustainable control solutions that appropriately balance risk mitigation and business agility.
- Communicate complex compliance, technology, and risk topics to both technical and non-technical audiences.
Program Leadership - Lead complex, cross-functional compliance and controls initiatives from strategy through execution.
- Develop executive-ready reporting, dashboards, and insights on control effectiveness, audit outcomes, risk trends, and compliance performance.
- Drive continuous improvement and standardization efforts across compliance programs.
QualificationsRequired/Minimum Qualifications- Bachelor's Degree in Business, Operations, Finance, or related field AND 4+ years experience in program management, process management, or process improvement OR equivalent experience.
Preferred Qualifications - 5+ years of experience in SOX, internal audit, external audit, compliance, risk management, or internal controls.
- Demonstrated experience with SOX frameworks, control testing, remediation management, and audit support.
- Experience supporting or assessing Information Technology General Controls (ITGCs).
- Understanding of automated controls, systems governance, and technology risk management.
- Proven ability to manage complex cross-functional initiatives and influence stakeholders without direct authority.
- Strong analytical, communication, and problem-solving skills.
- CPA, CIA, CISA, CRISC, or equivalent certification.
- Experience with enterprise technologies such as ERP platforms, workflow automation tools, AI-enabled solutions, and governance-risk-compliance (GRC) platforms.
- Experience evaluating controls related to automation, machine learning, artificial intelligence, and digital transformation initiatives.
- Experience with continuous controls monitoring, data analytics, and control automation.
- Experience operating in a large, global, publicly traded company environment.
Business Program Management IC4 - The typical base pay range for this role across the U.S. is USD $97,600 - $188,400 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $125,000 - $206,400 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
