Senior Program Manager - Compliance Governance, FinOps & Supplier Risk

Job description

**Overview** **Overview:** The Financial Operations (FinOps) team delivers business value for over 300 legal entities through proactive, innovative, compliant, and cost-effective global solutions that exceed stakeholder expectations. As a global team with delivery centers and staff around the world, we combine outsourcing and in-house resources and embrace “AND”—balancing agility with stability and innovation with compliance—to deliver challenging, creative, and deeply impactful work. Our functions include payroll, accounting, reporting & analysis, statutory compliance, supplier and partner payouts, procurement operations, employee expenses, outbound royalties, controls and compliance testing, and anti-corruption monitoring. FinOps continuously expands its scope and evolves its operating models through intelligent automation, process improvement, and co-innovation with strategic vendors, transforming legacy operations into AI-enabled services at scale. **Job Summary:** As a senior compliance individual contributor, you will lead a portfolio of compliance, governance, and risk-management initiatives across FinOps Controls + Compliance. You will translate complex and emerging legal, regulatory, and self-regulatory obligations into scalable standards, operational frameworks, clear business impacts, accountable ownership, and tracked actions. Navigating ambiguity and competing priorities, you will lead multifaceted short- and long-term workstreams; partner across teams to align business innovation and cost-management goals with compliance requirements; strengthen operational, regulatory, control, audit, and supplier-risk readiness; resolve compliance barriers; and drive measurable risk outcomes. Through this work, you will contribute to Controls + Compliance operational excellence and team culture while helping the organization deliver on its commitments with accountability and integrity. **What you'll bring:** - Extensive experience in governance, compliance strategy, and regulatory compliance within complex business environments. - Proven ability to lead compliance risk management initiatives, including gap analysis and policy development. - Excellent communication skills to effectively convey compliance information and influence senior leadership. - Expertise in analyzing regulatory trends and developing strategic responses to evolving legislation. - Demonstrated capability to manage multiple projects, prioritize tasks, and drive continuous improvement. - Commitment to upholding ethical standards and fostering a culture of integrity and accountability. **Responsibilities** - Establish and manage an integrated risk-management framework across FinOps, including a centralized risk repository, consistent assessment and prioritization criteria, accountable ownership, escalation thresholds, and remediation tracking. Synthesize assessments, incidents, audit findings, control deficiencies, supplier-risk signals, and other compliance indicators into prioritized risk themes, mitigation plans, and leadership decisions. - Establish and manage a formal risk-acceptance and exception-management program that governs decisions to accept, defer, or otherwise manage compliance or operational risk outside established requirements. Define decision criteria, approval authority, documented rationale, compensating actions, expiration and renewal requirements, escalation thresholds, and closure standards. Maintain a centralized record of approved exceptions and accepted risks, monitor residual exposure and aging, and surface emerging concentrations for leadership review. - Lead regulatory readiness by identifying emerging obligations, assessing FinOps impacts, and translating requirements into scalable policies, operational standards, controls, workflows, guidance, and training. Identify compliance gaps, assign accountable owners, and track implementation and remediation through closure while protecting the user support experience. - Influence the FinOps supplier-risk governance model, including risk tiering, assessment standards, escalation thresholds, and consistent requirements across supplier compliance, security, privacy, financial health, and other relevant third-party risk domains. Ensure material supplier risks are incorporated into the broader FinOps risk repository, mitigation process, and executive reporting. - Partner with Controls + Compliance and the SOX program to map policies and regulatory obligations to controls, strengthen assurance capabilities, support internal and third-party audits, and drive timely remediation of control deficiencies, audit findings, and corrective actions. - Identify, prioritize, and deploy responsible AI-enabled automation, workflow improvements, and process-optimization solutions that strengthen compliance monitoring, risk analysis, evidence and case management, executive reporting, operational efficiency, and decision quality at scale. - Lead core compliance operating rhythms, issue and risk reviews, action tracking, and audit-readiness activities across prioritized workstreams. Define compliance health metrics, operational KPIs, reporting standards, and dashboards that measure delivery progress, compliance adoption, risk reduction, and business outcomes. Translate results into clear leadership decisions, tradeoffs, escalation needs, and accountable next steps. - Conduct cross-organizational analysis of compliance requirements, business risks, operational impacts, control gaps, and process-improvement opportunities. Translate findings into scalable governance solutions and actionable mitigation plans, and drive alignment and execution with accountable stakeholders. - Build alignment across compliance leads, champions, business owners, and cross-functional stakeholders to establish clear decision rights, accountable ownership, execution plans, escalation paths, and timely resolution of compliance risks and actions. **Qualifications** ### Required/Minimum Qualifications - Bachelor's Degree in Business, Operations, Finance, or related field AND 4+ years experience in program management, process management, or process improvement OR equivalent experience. **Preferred Qualifications** - 8+ years of experience in compliance, risk management, internal controls, audit, governance, or complex program management, including experience supporting finance operations, procurement, supplier or third-party risk, or another highly regulated business environment. - Demonstrated ownership of an enterprise-scale policy, compliance, risk, or governance program, including responsibility for program design, stakeholder alignment, implementation, performance monitoring, and measurable outcomes. - Executive-level written and verbal communication skills, including the ability to synthesize complex compliance, risk, and performance information into clear narratives, decisions, tradeoffs, and actionable recommendations for senior leaders. - Experience independently defining and leading complex, large-scale cross-functional programs, including plans, milestones, dependencies, risks, executive communications, and measurable outcomes, while managing multiple concurrent workstreams across a highly matrixed organization. - Working knowledge of regulatory regimes affecting procurement and finance, such as anti-corruption, data protection, and supply-chain due-diligence requirements, with direct SOX/ICFR or broader Controls and Compliance experience in control design, testing, audit support, and remediation. - Experience translating external obligations into practical policy frameworks, operational standards, guidance, and sustainable business processes that protect compliance outcomes and the user support experience. - Experience applying AI, automation, or advanced analytics to improve the efficiency, consistency, or effectiveness of risk and compliance operations, with an understanding of responsible-use, governance, and control considerations. - Strong analytical, financial, and business acumen, with the ability to synthesize qualitative and quantitative information; evaluate business impact, return on investment, KPIs, performance, and value drivers; apply core data analytics; and present actionable recommendations to management. - Experience designing, implementing, or governing enterprise-scale compliance frameworks, controls, audit-readiness activities, and risk-management processes, including mechanisms to monitor obligations, track remediation, escalate issues, and drive accountability across multiple stakeholder groups. - Proven ability to build trusted partnerships, influence without direct authority, and drive alignment, accountability, and outcomes across cross-functional stakeholders, business leaders, and multiple manager-led teams. - Executive-level written and verbal communication skills, including data-driven storytelling and the ability to create clarity from ambiguity, frame risks and tradeoffs, articulate decisions and asks, and present actionable recommendations to senior leaders. - Demonstrated commitment to integrity, inclusion, accountability, continuous learning, and a learn-it-all culture, with a track record of valuing diverse perspectives, leading inclusive change, navigating ambiguity, and delivering business results with a strong compliance focus. - Relevant professional certification, such as CPA, CIA, CISA, CRISC, or a comparable credential. Business Program Management IC4 - The typical base pay range for this role across the U.S. is USD $97,600 - $188,400 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $125,000 - $206,400 per year. Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. --- Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about [**requesting accommodations.**](https://careers.microsoft.com/v2/global/en/accessibility.html)