Responsibilities
- Serve as the engineering team’s primary point of contact for privacy, compliance, and regulatory matters.
- Embed data minimization, purpose limitation, and privacy-by-design into product architecture.
- Translate GDPR, HIPAA, the EU AI Act, and other regulations into technical requirements, guardrails, and continuously verifiable controls.
- Lead privacy and security design reviews, threat modeling, and risk assessments for features and models.
- Build privacy infrastructure covering data classification, policy-driven access controls, consent and preference management, audit logging, data lineage, and retention controls.
- Evaluate and apply differential privacy, de-identification, secure enclaves, and federated approaches.
- Develop reusable libraries, patterns, and tooling and mentor engineers on privacy and compliance practices.
- Partner with legal, compliance, security, and product teams to support audits, certifications, and regulator-facing evidence.
- Track emerging health-privacy regulations and incorporate them into engineering roadmaps.
Requirements
- Extensive professional software engineering experience building and operating production systems at scale, with significant depth in privacy, security, or data protection.
- Strong programming skills in at least one major language, such as C#, Python, Go, or Java, and experience shipping reliable backend and infrastructure systems.
- Ability to translate privacy and regulatory requirements into technical designs and enforceable controls.
- Hands-on knowledge of privacy-by-design, data minimization, RBAC/ABAC access-control models, encryption, audit logging, and data lifecycle management.
- Experience conducting privacy and security reviews, threat modeling, and risk assessments.
- Strong cross-functional communication skills with product, engineering, legal, and compliance stakeholders.
- Bachelor’s degree in Computer Science or a related field, or equivalent practical experience.
- Preferred experience in health technology or another highly regulated industry.
- Familiarity with HIPAA, HITRUST, ISO 27001/27701, NHS data governance, FHIR, and clinical data handling.
- Practical experience with privacy-enhancing technologies, AI/ML systems, sensitive-data training or inference, cloud platforms, and large-scale data systems.
- Relevant certifications such as CIPP/E or CIPT are preferred.
Benefits
- The role is based in the United Kingdom and has a typical base pay range of £93,500.00–£161,800.00 per year.
- Certain roles may be eligible for benefits and other compensation.
- Applications are accepted on an ongoing basis until the position is filled, with the posting open for at least five days.
H1B sponsorship
Sponsorship for this role is unconfirmed.
Microsoft’s past filings provide context. They do not guarantee sponsorship for a current opening.
H1B petition approvals by fiscal year
- FY 2026 · through Q22,273
261 initial/new employment approvals · 740 changes of employer
- FY 20251,801
7 initial/new employment approvals · 681 changes of employer
- FY 20241,446
7 initial/new employment approvals · 716 changes of employer
Counts are petitions, including continuing employment and amendments, rather than unique hires. Source: USCIS
Job fields receiving H1B certifications
Partial fiscal year, through Q3
- Software Developers3,211 · 63%
- Data Scientists436 · 9%
- Information Technology Project Managers323 · 6%
- Electrical Engineers123 · 2%
- Business Intelligence Analysts119 · 2%
Job fields come from government occupation codes, rather than internal departments. Counts are certified Labor Condition Applications, not visa approvals or unique hires. Withdrawn and denied cases are excluded.
Source: US Department of LaborMatched government employer: MICROSOFT CORPORATION
About Microsoft
Every company has a mission. What's ours? To empower every person and every organization to achieve more. We believe technology can and should be a force for good and that meaningful innovation contributes to a brighter world in the future and today. Our culture doesn’t just encourage curiosity; it embraces it. Each day we make progress together by showing up as our authentic selves. We show up with a learn-it-all mentality. We show up cheering on others, knowing their success doesn't diminish our own. We show up every day open to learning our own biases, changing our behavior, and inviting in differences. Because impact matters. Microsoft operates in 190 countries and is made up of approximately 228,000 passionate employees worldwide.