Compliance Assurance Program Manager

The Exam & Audit (E&A) team, part of Meta's Regulatory Compliance Program (RCP), manages Meta's regulatory examination and audit engagements. E&A connects internal stakeholders with external assessors and regulators. Its work includes delivering external assessor testing on time and at quality, defending the program's position on findings, and driving remediation of identified gaps. As the second line of defense, E&A also gives compliance advice and independent oversight of Meta's privacy safeguards. It challenges their design and effectiveness so that compliance becomes a catalyst for trusted, responsible product growth rather than a constraint.

This role sits in the Third Party Risk Management (TPRM) domain. TPRM covers the safeguards that govern how third parties (developers, partners, vendors and service providers) access, use and protect Meta user data. The CAPM will be the second-line partner for these safeguards and will lead their readiness for independent assessment.

We are looking for an individual contributor who brings audit, risk, and privacy expertise to serve as a trusted second-line advisor and assessment lead for third-party safeguards. As well as an individual contributor who tackles privacy complexities head-on, to help design and build an comprehensive privacy compliance program, while keeping our users and their privacy at the forefront of everything that we do.

Responsibilities

Serve as the second-line compliance partner for TPRM safeguards across the whole third-party lifecycle: onboarding and due diligence, contract and platform terms, data access and API permissions, ongoing monitoring, enforcement, and offboarding and data deletion Lead FTC Consent Order Assessment readiness for assigned TPRM safeguards: coordinate assessor requests, review populations, samples and evidence, and own response narratives through to delivery Support Meta's commitment to protect users' privacy by enabling and advising privacy domains to navigate the complex landscape of global and data privacy regulations Advise on how new third-party integrations and platform capabilities affect Meta's privacy posture, and safeguards/controls Provide independent oversight to proactively identify issues, ensure visibility, and help prioritize remediation efforts within assigned safeguards/domains, acting as a key escalation point and advocate for risk mitigation Develop long-term objectives of how we will evolve our privacy program operating model with well-documented roadmaps, goals, and objectives while delivering on immediate priorities

Qualifications

5+ years of experience in Governance, Risk, and Compliance (GRC), internal or external audit, or risk management, including third-party or vendor risk management, data privacy, or security 2+ years of experience delivering technical programs or products from inception to delivery across organizations Working knowledge of privacy regulations (e.g., GDPR, CCPA) and third-party risk frameworks or standards (e.g., NIST, ISO 27001/27036, SOC 2) Experience testing or assessing controls (design and operating effectiveness) and preparing evidence for regulators or external auditors Prior experience working with program management either directly in product or engineering coupled with ITGC experience Experience using AI or automation to scale compliance testing, evidence review, and/or reporting Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements) Experience designing, operating, or assessing platform safeguards or API governance controls, such as developer access permissions and scopes, app review, data-use restrictions, rate limiting, or monitoring third-party data access Experience with regulatory consent orders or decrees (e.g., FTC Consent Order), especially provisions covering third parties Experience designing, implementing, and maintaining scalable global compliance operations Experience managing and directing contingent workers and contractors who specialize in privacy and security program management Design thinking process improvement experience leveraging creativity and structure to solve complex problems while putting the user first Experience in a leadership capacity influencing stakeholders and engineers Experience working in a technical environment and prior cross-group collaboration experience Bachelor's or Master's degree in a related discipline or equivalent practical experience Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)