Compliance Assurance Program Manager

About the role

The Compliance Assurance Program Manager (CAPM) works at the center of privacy regulation, legal, business, product, and engineering to put our users’ privacy at the center of everything we do. The Exams and Audit team is part of Meta’s Regulatory Compliance Program and establishes, diagnoses, improves, and manages privacy compliance for better user outcomes.

Responsibilities

• Provide strategic guidance and second line of defense oversight to improve company-wide operational processes to establish, measure, and improve privacy practices
• Enable and advise privacy domains to navigate the complex landscape of global and data privacy regulations
• Be a trusted partner to product, business, legal, and engineering teams across the company to develop deep insights and drive improvements into the mechanics of how teams incorporate compliance and privacy-by-design into operations and product life cycles
• Provide second line of defense guidance and oversight to ensure Meta’s compliance with global privacy regulations and obligations across all new and modified products, services, and practices
• Consult with legal partners to ensure that products and practices comply with global privacy laws and regulations
• Manage the successful delivery of the external regulatory audit, ensuring all requirements are met, documentation is complete, and findings are addressed in a timely manner
• Provide compliance advisories and reviews for new safeguards, issues, remediation plans, monitors, and safeguard changes, ensuring alignment with regulatory expectations and internal standards
• Develop long-term objectives for how we will evolve our privacy program operating model with well-documented roadmaps, goals, and objectives while delivering on immediate priorities
• Guide product, business, and engineering teams on complying with the Privacy Program and its day-to-day objectives
• Anticipate bottlenecks, provide escalation management, and ensure user privacy is not compromised

Requirements

• 7+ years of work experience in GRC, consulting, business operations, technical program management or other operational disciplines with specialization in data privacy and cyber security either in the Tech industry, Financial Services, or Healthcare
• Prior to working knowledge of GDPR, CCPA, and familiarity with similar privacy data protection legislation and security regulations
• Experience running project management or program management initiatives (e.g., organization-wide initiatives, large-scale integration management)
• Experience in communicating with technical and business stakeholders
• Experience in responding to or supporting external audits, examinations, or regulatory inquiries
• Communications experience with simplifying concepts and developing outputs
• Experience collaborating with cross-functional teams to drive results
• Experience identifying and resolving operational or compliance challenges in cross-functional environments

Qualifications

• Master's in business administration or a related field, or equivalent experience

Skills

• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration)
• Demonstrated experience orienting towards solutions in the context of competing perspectives
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)

Benefits

Meta offers competitive compensation, benefits, and opportunities for professional growth. Please visit our website for more details.