Program Manager, Controls Management

Meta's RCP function enables the company to build products that withstand regulatory scrutiny and meet global privacy, security, and integrity obligations at scale. Within RCP, Controls Management owns the lifecycle of Meta's compliance controls: how controls are designed, documented, implemented, changed, and monitored across the privacy, security, and integrity domains, as well as emerging domains such as AI.

We are seeking a Program Manager to own and drive strategic initiatives across one or more control portfolios, with a scope that may span the Privacy, Security, and Integrity domains as priorities evolve. You will be the connection point between Controls Management, first-line control owners, Legal, Regulatory Readiness, Risk, Assurance, and Examinations and Audit.

This role is a strong fit for is an experienced compliance, risk, or controls professional who is fluent in both their domain's subject matter and the mechanics of control design.

You should be able to make progress on loosely defined problems by clarifying scope, identifying dependencies, and proposing actionable next steps, able to manage competing priorities against regulatory deadlines, and able to translate between legal requirements, risk teams, and the engineering and operations teams who own and run the controls.

Responsibilities

• Own the end-to-end control lifecycle for the controls in your scope (intake, design, documentation, activation, and change management) in line with Meta's control framework and minimum standards
• Translate regulatory obligations, legal interpretations, and risk assessment findings into control objectives, control designs, and evidence expectations for first-line, technical, and operational teams
• Partner with first-line control owners across product, engineering, operations, and data teams to design and document controls that are defensible, testable, and adoptable
• Map controls to obligations, risks, and control objectives, keeping traceability current as regulations, products, and controls change
• Govern changes to controls through change management, assessing the impact on coverage, monitoring, and downstream assurance
• Maintain the accuracy and consistency of the control inventory in Meta's compliance systems, including metadata, ownership, and risk and objective linkages
• Drive control rationalization: consolidating, deprecating, or uplifting controls to reduce duplication and raise them to a consistent bar across domains
• Support the onboarding of new or emerging compliance domains into the shared control lifecycle, including domain structure, ownership models, and design standards
• Prepare controls and control owners for assurance and audit, partnering with Assurance and Examinations and Audit on readiness, walkthrough narratives, and evidence
• Maintain an in-depth understanding of the evolving regulatory landscape in your domain and translate changes into control framework updates
• Define, monitor, and report metrics that give leadership visibility into control health, design throughput, and remediation progress; identify deviations and drive corrective action
• Develop and own communication plans that keep stakeholders aligned on status, risks, and decisions
• Produce written analyses, recommendations, and presentations for senior leadership and cross-functional partners
• Identify gaps in processes, systems, and tooling, and drive scalable improvements, including automation and AI-enabled workflows
• Represent Controls Management in cross-organizational initiatives, providing control design expertise

Qualifications

• 6+ years of experience in compliance, risk management, audit, privacy, information security, trust and safety, program management, or a related field
• Experience designing, implementing, or evaluating control frameworks in a complex, cross-functional environment
• Experience translating regulatory or policy requirements into operational processes or controls
• Experience communicating risk findings and recommendations in writing to both technical and non-technical stakeholders, including leadership
• Experience managing multiple concurrent workstreams by prioritizing based on impact, urgency, and stakeholder needs Demonstrated ongoing AI skill development (e.g., prompt and context engineering, agent orchestration), and staying current with emerging AI technologies
• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
• Subject-matter experience in one or more of: privacy and data protection, information security, trust and safety, or content integrity, third-party risk, or AI governance
• Experience working with engineering teams in a technical environment to design or automate control systems
• Demonstrated ability to integrate AI tools to optimize or redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
• Experience in supporting external audits, regulatory examinations, or independent assessments
• Experience using data tools or dashboards to monitor control health and surface actionable insights
• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)