Security Compliance Program Lead - Regulatory Audits

Meta; Menlo Park, Northern (CA, KY); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Meta seeks a Staff-level Security Program Manager for its Regulatory Compliance Program in Menlo Park. You will lead audit-readiness efforts, manage second-line compliance functions, and collaborate with security, legal, and policy teams to ensure regulator-ready security practices worldwide.

You will drive remediation of systemic gaps, coordinate evidence for audits, and engage with regulators and audit bodies on behalf of Meta, while advancing responsible AI practices across programs.

Qualifications

• 8+ years in security compliance/GRC/regulatory program management in tech/financial services/healthcare
• Experience leading external security audits/regulatory examinations/third-party assessments
• Experience applying ISO 27001, SOC 2, NIST CSF, FedRAMP or equivalent frameworks
• Proven written communication of security/compliance to technical, legal, and executive stakeholders
• Ability to identify and drive remediation of systemic compliance gaps across cross-functional teams
• Professional certifications such as CISSP, CISA, CISM or equivalent
• Demonstrated ability to integrate AI tools to optimize workflows and improve outcomes
• Experience engaging regulators/audit bodies for a large tech platform
• Experience maturing second-line-of-defense in security/privacy compliance
• Experience implementing responsible AI practices (risk assessment, bias mitigation, quality reviews)
• Ongoing AI skill development (prompt/context engineering, agent orchestration)
• Ability to integrate AI-assisted tools to improve audit workflow and evidence analysis at scale

Responsibilities

• Lead audit-readiness programs and second-line compliance functions
• Coordinate evidence, findings responses, and remediation with internal teams
• Partner with security, legal, and policy teams to meet regulator/auditor expectations worldwide
• Drive design and execution of security compliance programs across external examinations
• Identify systemic gaps and drive cross-functional remediation
• Represent the organization in interactions with regulators or audit bodies
• Develop and mature second-line oversight within the security/privacy program
• Promote responsible, ethical AI practices in audits and compliance processes

Skills

Security GRC

Audit management

Compliance frameworks

Stakeholder communication

Gap remediation

Certifications

AI integration

Regulator engagement

Second-line oversight

Responsible AI

AI skills development

AI tooling

Job description

Meta seeks a Staff-level Security Program Manager for its Regulatory Compliance Program in Menlo Park. You will lead audit-readiness efforts, manage second-line compliance functions, and collaborate with security, legal, and policy teams to ensure regulator-ready security practices worldwide.

You will drive remediation of systemic gaps, coordinate evidence for audits, and engage with regulators and audit bodies on behalf of Meta, while advancing responsible AI practices across programs.