Marius Strom

About Marius Strom

Turning complexity into clarity: I bridge deep engineering expertise with strategic vision and collaborative leadership to deliver impact at global scale. 20+ years at Microsoft navigating the shift from packaged software → services → hyperscale cloud. I’ve led initiatives across physical infrastructure, cybersecurity, and risk management. My engineering background allows me to understand problems at their core, while my leadership style focuses on enabling teams, aligning diverse stakeholders, and moving complex programs from idea to execution.🤝 Known for: navigating complex organizations, fostering high-trust collaboration, and translating technical depth into actionable strategy. From managing global-scale risk programs to representing my organization at global forums on systemic risk, I work to turn every challenge into an opportunity for shared success. Guided by: curiosity, humility, and responsiveness - because the more I think I know, the more I realize there is to learn. I thrive on working with exceptional teams to tackle problems that shape the future. If you work at the intersection of engineering, risk, and strategy - or if you’re solving challenges that demand both technical insight and organizational acumen - let’s connect.

Experience

1. Principal Program Manager

   Microsoft

   Sep 2025 — Present · Seattle, WA, US

   Rebuilding cloud incident response for critical infrastructure: Leading the reinvention of Microsoft’s cybersecurity incident response approach for the Cloud Operations and Innovation division, unifying how critical infrastructure, operational technology (OT), and information technology (IT) systems respond to cyber events. Key Contributions: • Cross-business alignment: Partnering with central security organizations, Azure engineering, crisis management, and operations teams to create a unified incident response strategy across regions and suppliers. • Program clarity and scalability: Developing clear frameworks, governance models, and runbooks to drive consistent, rapid, and effective response to cybersecurity events. • Strategic risk reduction: Directly addressing one of the organization’s top identified cybersecurity risks through proactive integration of processes and technology in ways aligned with NIST SP800-61, NIS2, and DORA requirements. • OT/IT integration: Adapted enterprise IR to datacenter realities (change windows, safety, vendor access), aligned to ISO 27035 and IEC 62443, and designed to meet NIS2/DORA expectations.

Education

• Texas A&M University

  BS, Telecommunications Engineering Technology

Skills

• Networking
• Cloud Computing
• Security
• Information Security
• Information Security Management
• IT Strategy
• Program Management
• Online Services
• Computer Security
• IT Audit
• Sharepoint
• IT Operations
• Network Security
• Data Center
• Internal Controls
• Control Framework
• Process Control
• Archer Certified Professional
• Archer
• Identity Management
• Firewalls
• Project Management
• IT Management
• Microsoft Technologies
• Leadership
• Microsoft Products
• Red Teaming
• Red Team