Program Manager, Controls Management

Summary:

Meta's RCP function enables the company to build products that withstand regulatory scrutiny and meet global privacy, security, and integrity obligations at scale. Within RCP, Controls Management owns the lifecycle of Meta's compliance controls: how controls are designed, documented, implemented, changed, and monitored across the privacy, security, and integrity domains, as well as emerging domains such as AI.We are seeking a Program Manager to own and drive strategic initiatives across one or more control portfolios, with a scope that may span the Privacy, Security, and Integrity domains as priorities evolve. You will be the connection point between Controls Management, first-line control owners, Legal, Regulatory Readiness, Risk, Assurance, and Examinations and Audit. This role is a strong fit for is an experienced compliance, risk, or controls professional who is fluent in both their domain's subject matter and the mechanics of control design. You should be able to make progress on loosely defined problems by clarifying scope, identifying dependencies, and proposing actionable next steps, able to manage competing priorities against regulatory deadlines, and able to translate between legal requirements, risk teams, and the engineering and operations teams who own and run the controls.

Required Skills:

Program Manager, Controls Management Responsibilities:

1. Own the end-to-end control lifecycle for the controls in your scope (intake, design, documentation, activation, and change management) in line with Meta's control framework and minimum standards

2. Translate regulatory obligations, legal interpretations, and risk assessment findings into control objectives, control designs, and evidence expectations for first-line, technical, and operational teams

3. Partner with first-line control owners across product, engineering, operations, and data teams to design and document controls that are defensible, testable, and adoptable

4. Map controls to obligations, risks, and control objectives, keeping traceability current as regulations, products, and controls change

5. Govern changes to controls through change management, assessing the impact on coverage, monitoring, and downstream assurance

6. Maintain the accuracy and consistency of the control inventory in Meta's compliance systems, including metadata, ownership, and risk and objective linkages

7. Drive control rationalization: consolidating, deprecating, or uplifting controls to reduce duplication and raise them to a consistent bar across domains

8. Support the onboarding of new or emerging compliance domains into the shared control lifecycle, including domain structure, ownership models, and design standards

9. Prepare controls and control owners for assurance and audit, partnering with Assurance and Examinations and Audit on readiness, walkthrough narratives, and evidence

10. Maintain an in-depth understanding of the evolving regulatory landscape in your domain and translate changes into control framework updates

11. Define, monitor, and report metrics that give leadership visibility into control health, design throughput, and remediation progress

12. identify deviations and drive corrective action

13. Develop and own communication plans that keep stakeholders aligned on status, risks, and decisions

14. Produce written analyses, recommendations, and presentations for senior leadership and cross-functional partners

15. Identify gaps in processes, systems, and tooling, and drive scalable improvements, including automation and AI-enabled workflows

16. Represent Controls Management in cross-organizational initiatives, providing control design expertise

Minimum Qualifications:

Minimum Qualifications:

1. 6+ years of experience in compliance, risk management, audit, privacy, information security, trust and safety, program management, or a related field

2. Experience designing, implementing, or evaluating control frameworks in a complex, cross-functional environment

3. Experience translating regulatory or policy requirements into operational processes or controls

4. Experience communicating risk findings and recommendations in writing to both technical and non-technical stakeholders, including leadership

5. Experience managing multiple concurrent workstreams by prioritizing based on impact, urgency, and stakeholder needs

Preferred Qualifications:

Preferred Qualifications:

1. Demonstrated ongoing AI skill development (e.g., prompt and context engineering, agent orchestration), and staying current with emerging AI technologies

2. Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)

3. Subject-matter experience in one or more of: privacy and data protection, information security, trust and safety, or content integrity, third-party risk, or AI governance

4. Experience working with engineering teams in a technical environment to design or automate control systems

5. Demonstrated ability to integrate AI tools to optimize or redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)

6. Experience in supporting external audits, regulatory examinations, or independent assessments

7. Experience using data tools or dashboards to monitor control health and surface actionable insights

8. Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies

9. Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)

Public Compensation:

$122,000/year to $180,000/year + bonus + equity + benefits

Industry: Internet

Equal Opportunity:

Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.

Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at [email protected].