Strategic Risk Program Manager, Privacy

Meta; New York (NY); On-site; USD 163,000 - 227,000; Full time

Job summary

Meta is seeking a Strategic Risk Program Manager to lead privacy risk governance and strategy across its global product and infrastructure portfolio. You will define scalable frameworks for identifying, assessing, and mitigating privacy risks, partnering with legal, policy, engineering, and product teams to embed risk management into product development lifecycles.

You will drive cross-functional alignment on privacy risk posture, lead executive-level reporting, and shape long-term privacy risk

Qualifications

• Minimum 8+ years in privacy program management, risk management, or compliance.
• Experience designing and operating risk governance frameworks with escalation structures.
• Proven track record leading cross-functional programs across legal, policy, engineering, and product teams.

Responsibilities

• Define and own the strategic framework for privacy risk identification, assessment, and mitigation across Meta's products and infrastructure.
• Lead cross-functional programs translating regulatory requirements into scalable processes.
• Embed privacy risk controls into product development lifecycles and launches.

Skills

Privacy program management

Risk management

Cross-functional leadership

Regulatory knowledge (GDPR/CCPA)

Executive communication

AI tools familiarity

Education

CIPP/CIPM/CIPT certifications

Tools

Privacy tooling

Data flow mapping

Job description

Meta is seeking a Strategic Risk Program Manager to lead privacy risk governance and program strategy across the company's global product and infrastructure portfolio. In this role, you will define and operationalize frameworks for identifying, assessing, and mitigating privacy risks at scale, partnering with legal, policy, engineering, and product teams to embed risk management practices into how Meta builds and ships products. You will drive cross-functional alignment on privacy risk posture, influence executive decision-making, and shape the long-term direction of Meta's privacy risk programs in a complex and rapidly evolving regulatory environment.Strategic Risk Program Manager, Privacy Responsibilities:Define and own the strategic framework for privacy risk identification, assessment, prioritization, and mitigation across Meta's product and infrastructure landscapeLead cross-functional programs that translate privacy regulatory requirements and internal policy commitments into scalable operational processesPartner with legal, policy, engineering, and product teams to embed privacy risk controls into product development lifecycles and launch processesDevelop and maintain privacy risk reporting mechanisms, including executive-level dashboards and governance committee materials that communicate risk posture and program healthDrive alignment across organizational boundaries on privacy risk decisions, escalation paths, and accountability structuresIdentify systemic gaps in privacy risk coverage and design programs to close them, including tooling, process, and policy improvementsRepresent privacy risk program strategy in cross-functional forums, regulatory engagement preparation, and senior leadership reviewsEstablish metrics and key performance indicators to measure the effectiveness of privacy risk programs and drive continuous improvementMentor other program managers on privacy risk methodology, governance best practices, and cross-functional program executionAnticipate emerging privacy risks from new product areas, technologies, and regulatory developments and proactively shape program responsesMinimum Qualifications:8+ years of experience in privacy program management, risk management, or compliance program management within a technology company or regulated industryExperience designing and operationalizing risk governance frameworks, including risk assessment methodologies, control libraries, and escalation structuresExperience driving cross-functional programs with full accountability across legal, policy, engineering, and product stakeholders in ambiguous and complex environmentsExperience communicating privacy risk strategy and program status to executive audiences through written materials, briefings, and governance forumsExperience translating privacy regulatory requirements (such as GDPR, CCPA, or equivalent frameworks) into operational program requirements and controlsPreferred Qualifications:Familiarity with privacy engineering concepts such as data minimization, purpose limitation, privacy by design, and data flow mappingExperience working within a privacy accountability or consent order compliance program at a large-scale technology companyRecognized privacy certification such as CIPP, CIPM, or CIPTExperience building or scaling privacy risk tooling, intake processes, or risk register systems across a large organizationExperience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologiesDemonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)About Meta:Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today—beyond the constraints of screens, the limits of distance, and even the rules of physics.Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at [e-mail].$163,000/year to $227,000/year + bonus + equity + benefitsIndividual compensation is determined by skills, qualifications, experience, and location. Compensation details listed in this posting reflect the base hourly rate, monthly rate, or annual salary only, and do not include bonus, equity or sales incentives, if applicable. In addition to base compensation, Meta offers benefits. Learn more about benefits at Meta.