Program Manager, Privacy Risk Assessment

Meta; Menlo Park (CA); On-site; USD 122,000 - 180,000; Full time

Benefits offered by this job

Bonus

Equity

Benefits

Job summary

Meta seeks a Program Manager for Privacy Risk Assessment to lead end-to-end privacy risk reviews across product launches, partnerships, data integrations, and transactions. You will identify risks, evaluate privacy posture, and coordinate with Legal, Policy, Eng, and Product teams to integrate findings into design and implementation.

The role requires strong experience in privacy, risk management, and regulatory frameworks, with a focus on GDPR/CCPA, data transfers, and cross-border

Qualifications

• 6+ years of experience in privacy program management, privacy compliance, risk management, or a related field with direct exposure to data protection or regulatory compliance.
• Experience conducting privacy risk assessments, compliance reviews, or due diligence across product launches, partnerships, or corporate transactions.
• Experience analyzing data practices, data flows, and privacy controls across complex technical environments and translating findings into structured risk assessments.
• Experience working cross‑functionally with Legal, Engineering, and Policy stakeholders to drive risk mitigation and decision‑making in ambiguous, time‑sensitive contexts.
• Familiarity with global privacy regulations and frameworks, including GDPR, CCPA, or equivalent data protection laws.
• Bachelor's Degree or equivalent experience

Responsibilities

• Lead end-to-end privacy risk assessments across product launches, partnerships, data integrations, and corporate transactions, evaluating data practices, consent frameworks, data retention policies, and regulatory compliance posture
• Identify, document, and communicate privacy risks associated with proposed initiatives, including risks related to data transfers, third-party sharing, sensitive data categories, and cross-border data flows
• Develop and maintain structured privacy risk assessment frameworks and playbooks tailored to different initiative types and risk profiles
• Partner with Legal, Policy, Engineering, and Product teams to ensure that privacy risk findings are integrated into decision‑making, product design, and implementation planning
• Advise cross‑functional partners on complex privacy matters, translating regulatory requirements and privacy principles into actionable guidance
• Track and manage privacy risk remediation commitments across active initiatives, ensuring timely follow-through and appropriate documentation
• Contribute to team‑level goals by helping to define short, mid, and long‑term priorities for the privacy risk assessment program
• Engage leaders and cross‑functional stakeholders to build alignment on privacy risk findings and support informed decision‑making
• Help Meta meet its legal and regulatory obligations by ensuring that initiatives are evaluated against applicable data protection laws, including GDPR, CCPA, and other global privacy frameworks

Skills

Privacy risk assessment

Cross-functional collaboration

Regulatory compliance

Risk management

Written communication

Education

Bachelor's Degree or equivalent experience

Tools

AI tooling

Job description

Meta's Privacy Risk Assessment team plays a critical role in evaluating privacy risks across a wide range of initiatives, including product launches, partnerships, data integrations, and corporate transactions. In this role, you will lead privacy risk assessments across diverse workstreams, identifying data protection risks, evaluating privacy posture, and partnering with Legal, Policy, Engineering, and cross-functional teams to drive risk mitigation strategies. You will operate with a high degree of independence, exercising judgment across complex, time-sensitive initiatives where privacy risk intersects with regulatory compliance, product development, and business strategy.

Program Manager, Privacy Risk Assessment Responsibilities:

• Lead end-to-end privacy risk assessments across product launches, partnerships, data integrations, and corporate transactions, evaluating data practices, consent frameworks, data retention policies, and regulatory compliance posture
• Identify, document, and communicate privacy risks associated with proposed initiatives, including risks related to data transfers, third-party sharing, sensitive data categories, and cross-border data flows
• Develop and maintain structured privacy risk assessment frameworks and playbooks tailored to different initiative types and risk profiles
• Partner with Legal, Policy, Engineering, and Product teams to ensure that privacy risk findings are integrated into decision‑making, product design, and implementation planning
• Advise cross‑functional partners on complex privacy matters, translating regulatory requirements and privacy principles into actionable guidance
• Track and manage privacy risk remediation commitments across active initiatives, ensuring timely follow-through and appropriate documentation
• Contribute to team‑level goals by helping to define short, mid, and long‑term priorities for the privacy risk assessment program
• Engage leaders and cross‑functional stakeholders to build alignment on privacy risk findings and support informed decision‑making
• Help Meta meet its legal and regulatory obligations by ensuring that initiatives are evaluated against applicable data protection laws, including GDPR, CCPA, and other global privacy frameworks

Minimum Qualifications:

• 6+ years of experience in privacy program management, privacy compliance, risk management, or a related field with direct exposure to data protection or regulatory compliance
• Experience conducting privacy risk assessments, compliance reviews, or due diligence across product launches, partnerships, or corporate transactions
• Experience analyzing data practices, data flows, and privacy controls across complex technical environments and translating findings into structured risk assessments
• Experience working cross‑functionally with Legal, Engineering, and Policy stakeholders to drive risk mitigation and decision‑making in ambiguous, time‑sensitive contexts
• Familiarity with global privacy regulations and frameworks, including GDPR, CCPA, or equivalent data protection laws
• Bachelor's Degree or equivalent experience

Preferred Qualifications:

• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
• Experience managing privacy risk assessments at a technology company, law firm, or consulting firm across diverse initiative types
• Experience using AI tools or automation to improve risk assessment workflows, documentation quality, or operational efficiency
• Familiarity with privacy-by-design principles and experience evaluating privacy controls in consumer-facing technology products or platforms
• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
• Relevant privacy certifications such as CIPP, CIPM, or CIPT
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)

About Meta:

Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today—beyond the constraints of screens, the limits of distance, and even the rules of physics.

Meta is proud to be an Equal Employment Opportunity and affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.

Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at [e-mail].

$122,000/year to $180,000/year + bonus + equity + benefits

Individual compensation is determined by skills, qualifications, experience, and location. Compensation details listed in this posting reflect the base hourly rate, monthly rate, or annual salary only, and do not include bonus, equity or sales incentives, if applicable. In addition to base compensation, Meta offers benefits. Learn more about benefits at Meta.