National Security Officer

Microsoft's National Security charter for India strengthens national cyber resilience, elevates customer readiness, ensures regulatory compliance and positions Microsoft as the trusted security partner to governments and critical industries. The charter runs on four pillars: Keeping the Nation Safe (cyber agencies, Project ATLAS, Sovereign Cloud); Keeping Customers Safe (incident readiness and compliance); Keeping Citizens Safe (CrimeOS, law enforcement and anti-fraud); and Keeping Microsoft Safe (MeitY empanelment, DPDPA and CERT-In compliance).

The Deputy National Security Officer owns the day-to-day operations of this charter, so that the National Security Officer can focus on executive and regulator engagement and on Solution Engineering leadership. The role sits at the intersection of national cyber agencies, regulators, Public Sector customers and Microsoft's global security organizations.

A recent example of the work: Microsoft's One-Microsoft response with the Indian Cyber Crime Coordination Centre (I4C, Ministry of Home Affairs) on the transnational "Boss Scam" CEO-impersonation malware campaign, coordinating Defender Security Research, the Digital Crimes Unit (DCU), the Microsoft Security Response Center (MSRC) and CELA. 

1.       Agency and regulator cadence. Run the monthly engagement cadence with 8+ national cyber agencies and regulators (CERT-In, NCSC, NCIIPC, I4C, RBI, MeitY, SEBI, IRDAI); prepare briefings, track commitments and coordinate MSTIC quarterly threat briefings to top agencies.

2.       Threat-intelligence and incident coordination. Serve as the operational point of contact for government-origin threat intelligence and malware submissions; route and track cases across Defender Security Research, MSRC, DCU, CDOC and CELA; run the intake/case register and standardized status reporting to agencies; coordinate CERT-In regulatory incident notifications with CELA.

3.       Government Security Program (GSP). Drive onboarding of Cybersecurity agencies. 

4.       Cybersecurity Boardroom programme. Deliver 12 executive Cybersecurity Boardrooms per year for PS-critical customers with CDOC, MSTIC and advisory partners (EY, PwC); drive WARA/WASA and Unified Security coverage of PS-critical customers with CSU.

5.       Compliance and regulatory point of view. Support MeitY Advanced Services Empanelment, the DPDPA readiness assessment and the India Regulatory PoV (CERT-In, RBI, DPDPA, SEBI); map Microsoft cloud capabilities to Indian regulatory requirements with CELA.

6.       Skilling at scale. Run the Government CISO programme and national awareness programmes (targets: 100K Level-1 awareness, 1,000 professionals, 500 Government CISOs via NEILIT/NeGD MoUs; 50+ agency deep-dives).

7.       Citizen safety. Support CrimeOS deployment at I4C and state law-enforcement agencies, law-enforcement request handling with CELA/LENS/DCU, and containment of consumer-platform abuse (for example, Digital Arrest scams).

8.       Sovereign and national programmes. Support Project ATLAS, the Secure Windows for Government baseline with CERT-In, and Microsoft Cloud for Sovereignty / Azure Local positioning with agencies.

9.       Thought leadership. Contribute to 24+ articles and talks per year; represent Microsoft Security at agency forums and CISO communities; brief agency leadership and CISOs independently.

10.   Field support. Support account and security specialist teams on regulation-driven customer requirements in Public Sector and regulated industries.

·       8+ agencies and regulators on a formal monthly engagement cadence.

·       Oboarded agencies to the Government Security Program.

·       Standardized intake and status-reporting process live for government threat submissions.

·       12 Cybersecurity Boardrooms delivered for PS-critical customers.

·       MeitY Advanced Empanelment complete and the India Regulatory PoV published.

·       Government CISO programme launched and skilling targets on track.

·       10+ years in cybersecurity with depth in threat intelligence, incident response or security operations.

·       Hands-on fluency with the Microsoft Security stack: Microsoft Sentinel, Microsoft Defender (XDR, Endpoint, Office 365), Security Copilot and Purview.

·       Experience working with or inside government, law-enforcement, CERT or regulatory bodies in India.

·       Proven ability to brief senior government officials and CISOs without support.

·       Strong programme-management and cross-functional coordination skills.

·       Excellent written and verbal communication in English; Hindi is an advantage.

·       Indian citizen or eligible to work in India [To be confirmed with HR / CELA for any clearance considerations].

·       Prior NSO/NTO, CISO, CERT or national-agency experience.

·       Malware analysis or threat-hunting background.

·       Knowledge of the Indian regulatory landscape: CERT-In directions, MeitY cloud empanelment, DPDPA, and RBI/SEBI/IRDAI cyber frameworks.

·       Certifications such as CISSP, CISM, GIAC, SC-200 or SC-100.

·       Experience with sovereign cloud or air-gapped deployments.

·       Public speaking and published thought leadership.

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.