Privacy Data Analyst, Evidencing and Monitoring

Meta; Washington (District of Columbia); On-site; USD 153,000 - 209,000; Full time

Job summary

Meta is seeking a Product Risk Program Manager, Evidencing and Monitoring, to join the Assessor Engagement team. You will own data models and KCIs, build reproducible evidence for regulatory requests, and leverage SQL, Python, and Presto/Hive to support audits and risk assessments.

You will collaborate with product, engineering, legal, and risk stakeholders, clearly communicating findings and navigating ambiguous requirements while maintaining data quality and compliance across large privacy

Qualifications

• 4+ years of regulatory/compliance/audit analytics experience.
• SQL and scripting languages (Python); AI for compliance.
• Demonstrated analytical thinking and problem-solving experience.
• Able to explain and create code and objects as needed (e.g., Python) for evidence and tooling.
• Ability to work cross-functionally between engineering and various POC teams.
• Detail-oriented, conscientious focus for data quality and privacy processes.
• Experience communicating cross-functionally, particularly in the area of consensus-building and persuasion.
• Ability to work with tight, inflexible regulator deadlines.
• Flexibility to respond and change quickly to vague, uncertain, frequently changing requests.
• Regulator mindset and the ability to see from the perspective of the requestor.

Responsibilities

• Own the data model understanding end-to-end
• identify and recommend reporting remediation or schema changes when compliance processes shift
• Establish expertise across a system that's focused on reviewing and mitigating product risks
• Establish risk expertise across multiple areas including privacy and integrity
• Identify gaps in risk assessments and determinations made by product stakeholders
• Monitor KCIs to ensure system effectiveness and drive incremental improvement of associated controls
• Investigate KCI breaches, attest to results, and meet alert SLOs
• Supply KCI history for evidence packages when requested by regulators
• Ensure a complete and comprehensive representation of Meta's compliance framework to both internal and external stakeholders as needed
• Build and execute complex Presto/Hive population queries for regulator requests (population requests, sample requests, information requests, follow-ups)
• Respond to regulatory queries and partner with compliance partners and other stakeholders to develop and/or respond to gap analysis language, respond to regulator evidence requests by producing correct, reproducible artifacts with proof anyone can audit
• Create runnable Bento notebooks that reviewers can independently execute to verify results
• Create high quality action plan documentation to address compliance gaps where needed
• Explain and rationalize compliance and risk decisions to external stakeholders including auditors and regulators
• Track and provide any needed documentation that stems from remediation workflows
• Provide feedback to tooling and platform stakeholders aimed at improving the accuracy and efficiency of the system's outcomes
• Explain and defend data methodologies to regulators as needed

Skills

SQL

Python

Analytical thinking

Cross-functional collaboration

Regulatory mindset

Data quality

Communications

Tools

Presto/Hive

Bento notebooks

Hack

Job description

Summary:

The Product Risk Program Manager, Evidencing and Monitoring will join the Assessor Engagement team within the Product Risk Program Manager organization. This role is responsible for coordinating and providing evidence for Privacy Review Safeguards, owning Key Control Indicator (KCI) creation, maintenance, and monitoring, and ensuring data quality and reproducibility across all compliance artifacts. The Product Risk Program Manager, Evidencing and Monitoring will provide embedded technical context and continuity to navigate challenges including historical gaps, data deprecations, and high request volumes. They will build and maintain complex data pipelines and queries (Presto/Hive) to support external regulatory requests, produce reproducible evidence packages, and defend data methodologies during regulatory engagements. This role bridges the gap between engineering and compliance, requiring both technical depth (SQL, Python, Hack) and the ability to communicate findings clearly to external regulators and internal stakeholders including product, engineering, legal, and risk subject matter experts. Additionally, this role is responsible for conducting various audit types, assessing risk determinations for accuracy, including ensuring that approved privacy decisions include all relevant risks and related mitigations. The ideal candidate will have experience with compliance programs and auditing processes and be able to navigate ambiguity by defining priorities, clarifying requirements, and driving progress with incomplete information.

Required Skills:

Privacy Data Analyst, Evidencing and Monitoring Responsibilities:

1. Own the data model understanding end-to-end
2. identify and recommend reporting remediation or schema changes when compliance processes shift
3. Establish expertise across a system that's focused on reviewing and mitigating product risks
4. Establish risk expertise across multiple areas including privacy and integrity
5. Identify gaps in risk assessments and determinations made by product stakeholders
6. Monitor KCIs to ensure system effectiveness and drive incremental improvement of associated controls
7. Investigate KCI breaches, attest to results, and meet alert SLOs
8. Supply KCI history for evidence packages when requested by regulators
9. Ensure a complete and comprehensive representation of Meta's compliance framework to both internal and external stakeholders as needed
10. Build and execute complex Presto/Hive population queries for regulator requests (population requests, sample requests, information requests, follow-ups)
11. Respond to regulatory queries and partner with compliance partners and other stakeholders to develop and/or respond to gap analysis language, respond to regulator evidence requests by producing correct, reproducible artifacts with proof anyone can audit
12. Create runnable Bento notebooks that reviewers can independently execute to verify results
13. Create high quality action plan documentation to address compliance gaps where needed
14. Explain and rationalize compliance and risk decisions to external stakeholders including auditors and regulators
15. Track and provide any needed documentation that stems from remediation workflows
16. Provide feedback to tooling and platform stakeholders aimed at improving the accuracy and efficiency of the system's outcomes
17. Explain and defend data methodologies to regulators as needed

Minimum Qualifications:

Minimum Qualifications:

1. 4+ years of experience with regulatory/compliance/audit exposure in an analytical role
2. Familiarity with SQL, scripting languages (e.g., Python), and AI for compliance
3. Demonstrated analytical thinking and problem-solving experience
4. Able to explain and create code and objects as needed (e.g., Python) for evidence and tooling
5. Ability to work cross-functionally between engineering and various POC teams
6. Detail-oriented, conscientious focus for data quality and privacy processes
7. Experience communicating cross-functionally, particularly in the area of consensus-building and persuasion
8. Ability to work with tight, inflexible regulator deadlines
9. Flexibility to respond and change quickly to vague, uncertain, frequently changing requests
10. Regulator mindset and the ability to see from the perspective of the requestor

Preferred Qualifications:

Preferred Qualifications:

1. Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
2. Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
3. Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
4. Experience with Privacy/Risk reviews
5. Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
6. Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
7. Experience engaging with external regulators or in an external engagement role
8. Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
9. Familiarity with adjacent compliance spaces such as Competition, Integrity, and Security
10. Knowledge of Meta products and principles

Public Compensation:

$153,000/year to $209,000/year + bonus + equity + benefits

Industry:

Internet

Equal Opportunity:

Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.

Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at [e-mail].