Security Compliance Program Lead, Audit & Regulation

Meta; Washington (District of Columbia); On-site; USD 180,000 - 240,000; Full time

Job summary

Meta is seeking a Staff-level Security Program Manager to lead the design and execution of audit-readiness programs for external security regulatory examinations and third-party audits. You will act as a senior SME on security compliance frameworks and partner with security, legal, and policy teams to ensure regulator expectations are met.

You will drive second-line-of-defense oversight, manage evidence libraries, and coordinate remediation across product, infra, and operations, while shaping

Qualifications

• 8+ years of experience in security compliance, governance, risk and compliance (GRC) or regulatory program management
• Experience leading external security audits, regulatory examinations, or third-party assessments
• Experience applying security frameworks like ISO 27001, SOC 2, NIST CSF, FedRAMP or equivalents
• Experience communicating complex security concepts in writing to technical, legal and executive stakeholders
• Experience identifying and driving remediation of systemic compliance gaps across cross-functional teams

Responsibilities

• Lead end-to-end strategy and execution of external security regulatory examinations and audits
• Advise cross-functional teams on audit obligations and control expectations
• Develop and maintain an audit-readiness program with testing schedules and evidence libraries
• Oversee second-line-of-defense by assessing security controls across product, infra, and operations
• Partner with legal, privacy, and policy to translate regulatory requirements into control frameworks
• Identify compliance gaps and drive remediation and risk-mitigation strategies
• Define roadmaps for evolving the audit program and invest in tooling
• Communicate findings and program status to leadership through briefings and reports
• Mentor program managers and compliance professionals on audit practices
• Anticipate regulatory trends and adjust strategy accordingly

Skills

Security compliance

GRC

Audit management

ISO 27001

SOC 2

NIST CSF

FedRAMP

Regulatory frameworks

Job description

Meta is seeking a Staff-level Security Program Manager to lead the design and execution of audit-readiness programs for external security regulatory examinations and third-party audits. You will act as a senior SME on security compliance frameworks and partner with security, legal, and policy teams to ensure regulator expectations are met.

You will drive second-line-of-defense oversight, manage evidence libraries, and coordinate remediation across product, infra, and operations, while shaping