Program Manager, Security Risk Program

Meta Careers; Menlo Park, Northern (CA, KY); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Meta in Menlo Park is seeking a Program Manager to lead the Security Risk Program for AI product launches. You will design scalable risk assessment processes, translate product and engineering realities into a defensible risk position, and partner with Central Security, product groups, Privacy, Integrity, and Legal to embed risk into launch timelines.

The role requires comfort with ambiguity, influence in fast-moving environments, and a proven ability to build durable cross-functional

Job description

# Program Manager, Security Risk ProgramMenlo Park, CA Privacy+ 7 moreApply nowWe are building a governance, risk, and compliance function to enable our company to buildproducts that can withstand regulatory scrutiny, and ensure Meta continues to meet globalregulatory requirements and manage risk. Meta's Risk and Compliance Program (RCP) is the central engine driving risk management and compliance at the company, supporting Meta and the family of apps. Within RCP, the Security Risk Program (SRP) is the second-line function accountable for how Meta identifies, assesses, quantifies, and reports its security risk posture — delivering global security risk assessments, Capability Maturity & Effectiveness (CME) evaluations, AI and cloud risk assessments, and board-level and regulatory reporting.We are seeking a Security Risk Program Manager to build one of the program's highest-priority new capabilities: security risk assessment of AI product launches. Today, AI launches receivead-hoc coverage through security risk assessments designed for infrastructure — not forproduct-launch cadence, and not for cross-domain AI risk spanning Security, Privacy, Integrity,and Legal. You will design that capability from the ground up and scale it from roughly fiveassessments per quarter today to twenty or more per quarter by H1 2027, in step with Meta's AIproduct velocity.This is a builder and an influencer role in equal measure. AI launch risk cannot beassessed by one function acting alone — it requires Central Security, product groups, Privacy,Integrity, and Legal moving through a shared process on a launch timeline. You will own thatoperating model: translating product and engineering reality into a defensible risk position, andtranslating regulatory obligation into assessment work that product teams can actually absorbwithout stalling a launch. The ideal candidate is comfortable with ambiguity, effective inhigh-pressure and fast-moving situations, and able to build durable relationships across a widerange of technical and non-technical stakeholders.