Compliance Assurance Program Manager

Meta; Menlo Park, Seattle, Washington, New York (CA, WA, District of Columbia, NY); On-site; USD 180,000 - 260,000; Full time

Job summary

Meta in Menlo Park seeks a Compliance Assurance Program Manager (CAPM) to drive privacy governance, risk, and third-party safeguards. You will lead readiness for independent assessments, coordinate across privacy, legal, product, and engineering teams, and shape a scalable privacy compliance program.

The role emphasizes AI-enabled testing, evidence collection, and regulatory readiness. The ideal candidate has 5+ years in GRC/audit, strong knowledge of GDPR/CCPA, and proven program management in

Qualifications

• 5+ years of experience in Governance, Risk, and Compliance (GRC), internal or external audit, or risk management, including third-party or vendor risk management, data privacy, or security.
• 2+ years of experience delivering technical programs or products from inception to delivery across organizations.
• Working knowledge of privacy regulations (e.g., GDPR, CCPA) and third-party risk frameworks or standards (e.g., NIST, ISO 27001/27036, SOC 2).
• Experience testing or assessing controls (design and operating effectiveness) and preparing evidence for regulators or external auditors.
• Prior experience working with program management either directly in product or engineering coupled with ITGC experience.
• Experience using AI or automation to scale compliance testing, evidence review, and/or reporting.
• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies.
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements).
• Experience designing, operating, or assessing platform safeguards or API governance controls, such as developer access permissions and scopes, app review, data-use restrictions, rate limiting, or monitoring third-party data access.
• Experience with regulatory consent orders or decrees (e.g., FTC Consent Order), especially provisions covering third parties.
• Experience designing, implementing, and maintaining scalable global compliance operations.
• Experience managing and directing contingent workers and contractors who specialize in privacy and security program management.
• Design thinking process improvement experience leveraging creativity and structure to solve complex problems while putting the user first.
• Experience in a leadership capacity influencing stakeholders and engineers.
• Experience working in a technical environment and prior cross-group collaboration experience.
• Bachelor's or Master's degree in a related discipline or equivalent practical experience.
• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews).

Responsibilities

• Lead readiness for independent assessment of third-party safeguards.
• Serve as trusted second-line advisor on governance, risk, and compliance for third-party data access and protections.
• Partner with product, engineering, and legal teams to design and implement scalable privacy controls and a comprehensive compliance program.
• Provide evidence and support during audits and regulatory examinations to defend program positions.
• Leverage AI/tools to scale testing, evidence review, and reporting, while maintaining high standards of privacy and security.

Skills

GRC

Internal Audit

Vendor Risk Management

Privacy Regulations

GDPR

CCPA

NIST

ISO 27001

SOC 2

AI for Compliance

Program Management

ITGC

AI Ethics

Stakeholder Influence

Cross-Group Collaboration

Education in related field

Education

Bachelor's or Master's degree in a related discipline

Job description

The global privacy regulatory landscape is not static, and the product and technical landscape at Meta changes multiple times daily to continue to meet and meet the needs of our more than 3.5 billion daily users on our platform. The Compliance Assurance Program Manager (CAPM) works at the center of privacy regulation, legal, business, product, and engineering to put our users' privacy at the center of everything we do.

The Exam & Audit (E&A) team, part of Meta's Regulatory Compliance Program (RCP), manages Meta's regulatory examination and audit engagements. E&A connects internal stakeholders with external assessors and regulators. Its work includes delivering external assessor testing on time and at quality, defending the program's position on findings, and driving remediation of identified gaps. As the second line of defense, E&A also gives compliance advice and independent oversight of Meta's privacy safeguards. It challenges their design and effectiveness so that compliance becomes a catalyst for trusted, responsible product growth rather than a constraint.

This role sits in the Third Party Risk Management (TPRM) domain. TPRM covers the safeguards that govern how third parties (developers, partners, vendors and service providers) access, use and protect Meta user data. The CAPM will be the second-line partner for these safeguards and will lead their readiness for independent assessment.

We are looking for an individual contributor who brings audit, risk, and privacy expertise to serve as a trusted second-line advisor and assessment lead for third-party safeguards. As well as an individual contributor who tackles privacy complexities head-on, to help design and build an comprehensive privacy compliance program, while keeping our users and their privacy at the forefront of everything that we do.

• 5+ years of experience in Governance, Risk, and Compliance (GRC), internal or external audit, or risk management, including third-party or vendor risk management, data privacy, or security
• 2+ years of experience delivering technical programs or products from inception to delivery across organizations
• Working knowledge of privacy regulations (e.g., GDPR, CCPA) and third-party risk frameworks or standards (e.g., NIST, ISO 27001/27036, SOC 2)
• Experience testing or assessing controls (design and operating effectiveness) and preparing evidence for regulators or external auditors
• Prior experience working with program management either directly in product or engineering coupled with ITGC experience
• Experience using AI or automation to scale compliance testing, evidence review, and/or reporting
• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
• Experience designing, operating, or assessing platform safeguards or API governance controls, such as developer access permissions and scopes, app review, data-use restrictions, rate limiting, or monitoring third-party data access
• Experience with regulatory consent orders or decrees (e.g., FTC Consent Order), especially provisions covering third parties
• Experience designing, implementing, and maintaining scalable global compliance operations
• Experience managing and directing contingent workers and contractors who specialize in privacy and security program management
• Design thinking process improvement experience leveraging creativity and structure to solve complex problems while putting the user first
• Experience in a leadership capacity influencing stakeholders and engineers
• Experience working in a technical environment and prior cross-group collaboration experience
• Bachelor's or Master's degree in a related discipline or equivalent practical experience
• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)