Assistant General Counsel, Compliance & Ethics

Share job

The Microsoft Compliance & Ethics (C&E) organization is seeking an experienced attorney to help lead regulatory readiness and oversight. This Assistant General Counsel,Compliance & Ethics role will help execute a range of second-line compliance programs relating to regulatory obligations for the company, including but not limited to Executive Order 14117 (DSP) and the Digital Markets Act. You will partner across engineering, security, privacy, procurement, HR, trade, and product teams to design, improve, and help run these regulatory compliance programs. Your work will play a critical role in upholding Microsoft’s commitment to building and maintaining trust with customers, partners, and governments around the world.

Required Qualifications

• Juris Doctor Degree or international equivalent degree AND 9+ years experience as a practicing attorney in regulatory compliance, privacy/security, sanctions/export/trade, or adjacent fields
  • OR equivalent experience.
• Active license to practice law in a jurisdiction and capable of meeting admission requirements in relevant jurisdiction.
• Experience in translating regulatory requirements into governance and control testing programs and experience implementing governance and risk management processes to manage organizational risk.
• Experience with AI tools and their application to compliance processes and the ability to map controls to regulatory and business requirements in engineering and technical domains.

Legal Counsel IC6 - The typical base pay range for this role across the U.S. is USD $160,700 - $284,400 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $207,700 - $311,500 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay

Microsoft will accept applications for the role until October 17, 2025.

#CELA

• Apply regulatory expertise across a range of jurisdictions and subject areas to novel situations and contexts.
• Design and operate second-line compliance programs including policies, training, communications, testing, and reporting.
• Design and execute oversight of policy compliance, including controls aligned to DSP, CISA, and NIST requirements.
• Build and improve governance mechanisms, recordkeeping processes, and reporting systems.
• Manage audits and certifications.
• Maintain oversight of third-party diligence and vendor compliance requirements.
• Lead cross-functional monitoring programs and manage external consultants and vendors.
• Continuously improve the program based on learnings and regulatory updates.