Job Description

Locations

• London, England, GB

Skills Required

• and operating production systems at scaleintermediate
• health technologyintermediate
• health-data standardsintermediate
• AI/ML systemsintermediate
• cloud platformsintermediate

Required Qualifications

• Extensive professional software engineering experience building and operating production systems at scale, with significant depth in privacy, security, or data protection. (experience)
• Extensive professional software engineering experience building and operating production systems at scale, with significant depth in privacy, security, or data protection. (experience)
• Strong programming skills in at least one major language (e.g., C#, Python, Go, Java, or similar) and a track record of shipping reliable backend and infrastructure systems. (experience)
• Strong programming skills in at least one major language (e.g., C#, Python, Go, Java, or similar) and a track record of shipping reliable backend and infrastructure systems. (experience)
• Demonstrated ability to translate privacy and regulatory requirements (such as GDPR or HIPAA) into technical designs and enforceable controls. (experience)
• Demonstrated ability to translate privacy and regulatory requirements (such as GDPR or HIPAA) into technical designs and enforceable controls. (experience)
• Hands-on command of privacy and security fundamentals: privacy-by-design, data minimization, access-control models (RBAC/ABAC), encryption, audit logging, and data lifecycle management. (experience)
• Hands-on command of privacy and security fundamentals: privacy-by-design, data minimization, access-control models (RBAC/ABAC), encryption, audit logging, and data lifecycle management. (experience)
• Experience conducting privacy and security reviews, threat modeling, and risk assessments. (experience)
• Experience conducting privacy and security reviews, threat modeling, and risk assessments. (experience)
• Excellent cross-functional communication - able to influence product, engineering, legal, and compliance stakeholders and explain trade-offs clearly. (experience)
• Excellent cross-functional communication - able to influence product, engineering, legal, and compliance stakeholders and explain trade-offs clearly. (experience)
• Bachelor’s degree in Computer Science or a related field, or equivalent practical experience. (experience)
• Bachelor’s degree in Computer Science or a related field, or equivalent practical experience. (experience)

Preferred Qualifications

• Experience in health technology (strongly preferred), or in another highly regulated industry such as financial services, government, or insurance (acceptable). (experience)
• Experience in health technology (strongly preferred), or in another highly regulated industry such as financial services, government, or insurance (acceptable). (experience)
• Familiarity with health-data standards and governance frameworks (e.g., HIPAA, HITRUST, ISO 27001/27701, NHS data governance, FHIR and clinical data handling). (experience)
• Familiarity with health-data standards and governance frameworks (e.g., HIPAA, HITRUST, ISO 27001/27701, NHS data governance, FHIR and clinical data handling). (experience)
• Practical experience applying privacy-enhancing technologies - differential privacy, anonymization/de-identification, secure enclaves, or federated learning. (experience)
• Practical experience applying privacy-enhancing technologies - differential privacy, anonymization/de-identification, secure enclaves, or federated learning. (experience)
• Experience with AI/ML systems and the privacy considerations of training and inference on sensitive data. (experience)
• Experience with AI/ML systems and the privacy considerations of training and inference on sensitive data. (experience)
• Experience with cloud platforms (Azure preferred) and large-scale data systems. (experience)
• Experience with cloud platforms (Azure preferred) and large-scale data systems. (experience)
• Relevant certifications such as CIPP/E or CIPT. (certification)
• Relevant certifications such as CIPP/E or CIPT. (certification)
• Software Engineering IC5 - The typical base pay range for this role across United Kingdom is £ 93,500.00 - £ 161,800.00 per year. Certain roles may be eligible for benefits and other compensation. (experience)
• Find additional benefits and pay information here:https://careers.microsoft.com/v2/global/en/corporate-pay/united-kingdom-corporate-pay.html (experience)
• This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. (experience)

Responsibilities

• Be the primary point of contact for privacy, compliance, and regulatory matters within the engineering team - the person product and engineering turn to for guidance, design review, and decisions.
• Be the primary point of contact for privacy, compliance, and regulatory matters within the engineering team - the person product and engineering turn to for guidance, design review, and decisions.
• Ensure products such as Copilot Health are designed and built in a privacy-preserving way, embedding data minimization, purpose limitation, and privacy-by-design into architecture from the outset.
• Ensure products such as Copilot Health are designed and built in a privacy-preserving way, embedding data minimization, purpose limitation, and privacy-by-design into architecture from the outset.
• Translate complex health and data-protection regulations - including UK and EU GDPR, HIPAA, and the EU AI Act - into concrete technical requirements, engineering guardrails, and automated, continuously verifiable controls.
• Translate complex health and data-protection regulations - including UK and EU GDPR, HIPAA, and the EU AI Act - into concrete technical requirements, engineering guardrails, and automated, continuously verifiable controls.
• Lead privacy and security design reviews and threat modeling for new features and models, identifying risks early and architecting practical, scalable mitigations.
• Lead privacy and security design reviews and threat modeling for new features and models, identifying risks early and architecting practical, scalable mitigations.
• Design and build foundational privacy infrastructure: data classification, policy-driven access controls, consent and preference management, audit logging, data lineage, and retention and lifecycle controls.
• Design and build foundational privacy infrastructure: data classification, policy-driven access controls, consent and preference management, audit logging, data lineage, and retention and lifecycle controls.
• Evaluate and apply privacy-enhancing technologies - such as differential privacy, de-identification, secure enclaves, and federated approaches - where they meaningfully reduce risk to users.
• Evaluate and apply privacy-enhancing technologies - such as differential privacy, de-identification, secure enclaves, and federated approaches - where they meaningfully reduce risk to users.
• Build reusable libraries, patterns, and tooling that let every engineer ship privacy-preserving features by default, and raise the team’s privacy and compliance fluency through mentorship and clear standards.
• Build reusable libraries, patterns, and tooling that let every engineer ship privacy-preserving features by default, and raise the team’s privacy and compliance fluency through mentorship and clear standards.
• Partner across legal, compliance, security, and product to balance strong user protections with product velocity, and to support audits, certifications, and regulator-facing evidence.
• Partner across legal, compliance, security, and product to balance strong user protections with product velocity, and to support audits, certifications, and regulator-facing evidence.
• Stay ahead of emerging health-privacy regulation and industry practice, bringing that perspective into roadmaps before requirements become blockers.
• Stay ahead of emerging health-privacy regulation and industry practice, bringing that perspective into roadmaps before requirements become blockers.

Benefits

• general: Flexibility: Balance what matters—your work, your life, and your team—through trust, autonomy, and shared accountability
• general: Growth: Stretch your skills, expand your impact, and grow with support that meets you where you are
• general: Wellbeing: Support for your body, mind, and financial future—so you can stay energized and do your best work
• general: Community PCS: Find your people, build your network, and feel supported every step of the way

Travel Requirements

Less than 25%

Tags & Categories