Senior Security Compliance & Audit Program Lead

Meta; New York (NY); On-site; USD 170,000 - 230,000; Full time

Job summary

Meta is seeking a Staff-level Security Program Manager for the Exam and Audit team to drive audit-readiness programs, coordinate external security examinations, and align security practices with regulators worldwide.

You will lead audits across ISO 27001, SOC 2, and NIST CSF, oversee second-line-of-defense controls, and mentor junior team members while partnering with security, legal, and policy teams to manage regulatory risk.

Qualifications

• 8+ years of experience in security compliance, governance, risk and compliance (GRC), or regulatory program management within technology/regulated industries.
• Experience leading or managing external security audits, regulatory examinations, or third-party assessments with evidence coordination and remediation oversight.
• Experience applying security compliance frameworks such as ISO 27001, SOC 2, NIST CSF, FedRAMP, or equivalent standards in an enterprise environment.
• Proven ability to communicate complex security and compliance concepts in writing to technical, legal, and executive stakeholders.

Responsibilities

• Lead end-to-end strategy and execution of external security regulatory examinations and third-party audits, including evidence coordination and remediation tracking.
• Advise cross-functional teams on audit obligations and control expectations across frameworks.
• Develop and maintain an audit-readiness program with control testing schedules and evidence libraries.
• Provide second-line-of-defense oversight of security controls across product, infrastructure, and operations.
• Partner with security, legal, privacy, and policy teams to translate regulatory requirements into actionable controls.

Skills

Security governance

Risk management

Regulatory analysis

Written communication

Tools

ISO 27001

SOC 2

NIST CSF

FedRAMP

Job description

Meta is seeking a Staff-level Security Program Manager for the Exam and Audit team to drive audit-readiness programs, coordinate external security examinations, and align security practices with regulators worldwide.

You will lead audits across ISO 27001, SOC 2, and NIST CSF, oversee second-line-of-defense controls, and mentor junior team members while partnering with security, legal, and policy teams to manage regulatory risk.