AI Risk Lead

Overview

Microsoft Cloud Operations and Innovation (CO&I) is the team behind the cloud. Within CO&I, the Global Project Controls (GPC) team is responsible for delivering core datacenter infrastructure for Microsoft's cloud business. The MS portfolio consists of complex, multi-disciplinary, large scale, multi-year datacenter construction and lease projects. We are looking for a passionate, high-energy individual to help fill the critical role of AI Risk Lead.

In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.

"Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond."

This role is located either in one or all hub locations - Atlanta, Redmond, Phoenix, Washington DC, San Antonio, and Milwaukee, Wisconsin. Relocation support will be provided, and successful candidates must relocate or reside within 50 miles of the hub office location. This role requires 3 days a week in office or onsite.

Responsibilities

Data Analytics and Risk Insights

• Drives and coaches others identify pertinent information from risk assessment modeling output to gather risk insights on resource prioritization, root causes, risk identification, and top risk- related mitigation.
• Leads and provides insight on the risk assessment model for the most complex projects. Determines and advises others on what information is needed and how the information is applied in the model. Builds and sustains complex analytical models. Ensures appropriate data is available for the team.
• Leads the identification of the correct methodology and framework for risk modeling for complex projects. Leverages the appropriate datasets and up-to-date risk methodologies, determines critical information to include in the model(s), and updates the model as necessary.

Issue and Exception Management

• Identifies risk policy or procedure, risk ownership, or contractual language issues from relevant stakeholders at all levels of the organization across multiple business areas. Drives the conversation with relevant high-level stakeholders to determine mitigation procedures and ensures issues are resolved. Drives and oversees regular rhythm of business (RoB) meetings to gather insights on issues from others and to share insights.
• Leads assessment of policy and procedure exception requests. Ensures understanding of the request rationale and presents any alternative options for compliance. Determines appropriate mitigation plans and timelines for exception expirations for the most complex projects.

Risk Assessment

• Leverages relevant internal and external information and/or reports (e.g., threat intelligence reports). Leverages client team representative information and synthesizes information from interviews or focus groups with job incumbents across company-wide business units to identify risks, determine the degree of risks within the work environment, identify any relevant data sources, and gather additional relevant context. Analyzes the information to understand the risk associated with the job, project, or process and root causes of the risks on the most complex projects.
• Drives the process and methodology for the risk management lifecycle (e.g., data collection and data analytic methods) for projects larger in scope and duration or for overall company risk posture. Improves upon processes and methodologies by incorporating novel solutions based on the evolving threat landscape and industry-leading innovations.
• Scores risks using appropriate risk profile scoring and leverages scores to determine risk prioritization. Refines and updates scorecard based on risk landscape developments and on expertise. Leads the development of risk scorecard(s) by assigning weighted scores to identified risks leveraging risk management models and rating criteria on complex projects.

Risk Governance

• Identifies ownership and assigns accountability to stakeholders for top risks and top mitigating activities for the most complex projects. Leverages reports on the level of risks continuously and updates high-level accountability owners on the status. Ensures that the risks are being mitigated and any issues that arise are being addressed in a timely manner for the most complex projects.
• Drives relationship with stakeholders from a complex or new line of business. Drives the conversation on the risk assessment information describing relevant behaviors, activities, or processes and the identified risks associated with them to ensure awareness and support on the most complex projects. Explains risk related terms and concerns and connects them to appropriate business spaces. Drives process of determining appropriate course of action with stakeholders.

Risk Remediation

• Drafts and reviews mitigation plans and processes (including appropriate risk registers and controls on risks), and helps accountability owners understand the plans to reduce risk for the most complex projects. Demonstrates business case and business-related needs for mitigation plan. Ensures alignment and agreement with risk reduction plans, and that accountability owners have the capacity to drive the mitigation plan for the most complex projects. Holds accountability holders responsible for driving risk down. Coordinates across the different accountability owners to ensure teams are tracking and trending properly.
• Reviews and approves risk governance to ensure risk areas are receiving the appropriate amount of attention for the most complex projects. Identifies any concerns of related to risks being monitored, reviews any related output, and provides relevant insights and recommendations.

Qualifications

Required/minimum qualifications

• Bachelor's Degree AND 8+ years experience in project risk management, compliance, construction, engineering, and/or operations
  • OR 10+ years experience in project risk management, compliance, construction, engineering, and/or operations
  • OR equivalent experience.

Background Check Requirements:

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:

• Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Additional or preferred qualifications

• Master's Degree in Project Risk Management, Engineering, Construction, Project Management, Compliance or related field AND 12+ years experience in risk management in the context of operations, engineering, business analyst, consulting, auditing, compliance, and/or finance
  • Bachelor's Degree in Risk Management, Engineering, Project Management, Construction, Security, or related field AND 8+ years experience in Risk Management in the context of Construction, Engineering, Operations, Business Analyst, Consulting, Compliance
  • OR equivalent experience.
• Membership with a relevant risk domain area association including: Project Management Institute (PMP, RMP); American Association Cost Engineers (PRMP, DRMP), RICS full membership (MRICS or FRICS) or equivalent, Institute of Risk Management (CMIRM, CFIRM, SIRM)

Risk Management IC6 - The typical base pay range for this role across the U.S. is USD $130,900 - $277,200 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $165,600 - $303,600 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
;br>
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.