Director, Security Risk Program — AI, Cloud & Regulators

Meta; Washington, Northern (District of Columbia, KY); Hybrid; USD 260,000 - 360,000; Full time

Job summary

Meta seeks a Director of Security Risk Program to steer a four-pillared portfolio, overseeing 38+ resources, and lead risk assessments for AI, cloud security, and enterprise reporting.

The role requires 15+ years in security risk management and 8+ years building teams, with experience presenting to executives and regulators. You will collaborate with Central Security, Eng, Legal, and product groups to shape strategy.

Qualifications

• 15+ years of experience in security risk management, technology risk, or related field.
• 8+ years leading and growing teams, incl. managers or senior ICs.
• Experience shaping organizational strategy with executive leadership.
• Proven track record with external regulatory or certification regimes (e.g., GDPR, SOC 2).
• Experience building AI risk capabilities and risk quantification at enterprise scale.
• Familiarity with NIST CSF, ISO 27001, or FAIR methodologies.

Responsibilities

• Lead Meta's Security Risk Program portfolio across four pillars and 38+ resources.
• Stand up AI risk assessment capabilities and cloud security risk governance.
• Translate engineering/product realities into defensible risk positions for leadership.
• Partner with Central Security, Risk Org PM, Legal, and product teams to drive policy and roadmap.
• Present risk insights to executives, the Board, and regulators; influence cross-org decisions.

Skills

Leadership

Security risk management

Strategic planning

Regulatory interfacing

Stakeholder management

Risk reporting

Cross-functional collaboration

Talent development

Communication with executives

Program governance

Vendor management

AI risk experience

Cloud security risk

GRC frameworks

Education

Advanced degree in a related field

Job description

Meta seeks a Director of Security Risk Program to steer a four-pillared portfolio, overseeing 38+ resources, and lead risk assessments for AI, cloud security, and enterprise reporting.

The role requires 15+ years in security risk management and 8+ years building teams, with experience presenting to executives and regulators. You will collaborate with Central Security, Eng, Legal, and product groups to shape strategy.