Global Compliance & AI Risk Program Manager

Meta; New York (NY); On-site; USD 122,000 - 180,000; Full time

Benefits offered by this job

Bonus

Equity

Benefits

Job summary

Meta's Regulatory Compliance Programs (RCP) is the central engine driving risk management and compliance at the company, supporting Meta and the family of apps.

We're seeking experienced GRC, Trust & Safety, or Security professionals to help enable and safeguard Meta's products and services, which have a truly global scale, by upholding existing Content Regulation requirements and meeting emergent compliance obligations.

Qualifications

• 6+ years of experience in security, technology risk, GRC, trust & safety, or related discipline.
• Experience partnering with product/engineering on tech risk or compliance programs.
• Experience delivering assurance or reporting against external regulatory or certification regimes (e.g., EU/Global regulatory frameworks, SOC 2, HIPAA, FDA, US Government requirements)

Responsibilities

• Support the execution of Meta's Compliance & Assurance Programs priorities.
• Partner with Product teams to enable risk-reducing measures including monitoring, reporting, and oversight.
• Embed compliance evaluations into early-stage product lifecycles for accelerated launches.
• Prepare compliance materials and support engagement with Leaders, Committees, Regulators, and external auditors.
• Drive cross-domain alignment to implement oversight models.
• Track program metrics, deliverables, and scale AI/automation initiatives.

Skills

GRC

Security risk

Cross-functional collaboration

AI risk assessment

Regulatory knowledge

Education

Bachelor's degree or equivalent

Tools

AI tools

Job description

Meta's Regulatory Compliance Programs (RCP) is the central engine driving risk management and compliance at the company, supporting Meta and the family of apps.

We're seeking experienced GRC, Trust & Safety, or Security professionals to help enable and safeguard Meta's products and services, which have a truly global scale, by upholding existing Content Regulation requirements and meeting emergent compliance obligations.