Privacy Risk and Compliance Manager
Meta

We are seeking a Privacy Risk and Compliance Manager with broad operational knowledge across a range of risk and compliance disciplines. You will have the opportunity to tackle privacy complexities head-on, to help design and build continuous operational compliance practices throughout the company while representing our users and their privacy at the forefront of everything that we do. Privacy Risk and Compliance Manager will proactively identify risk themes and drive scalable remediation across multiple domains, including but not limiting to: Privacy Review, Security for Privacy, Cloud, Data Lifecycle Management, Third Party Risk Management, and Transparency Notice & Choice.The role is an assurance role in the second line of defense. In this role, you will partner with Meta's business and product teams across the company to develop demonstrated insights and drive improvements into the mechanics of how teams incorporate compliance and privacy-by-design into operations and product life cycles.

Privacy Risk and Compliance Manager Responsibilities:

• Provide guidance and second line of defense oversight to establish, measure and improve privacy practices
• Work with first line of defense teams on risk identification, issue remediation and remediation documentation
• Ensures accuracy and timely completion of required information for privacy workstreams
• Become a trusted partner working cross-functionally with engineer, product and business teams building a demonstrated understanding of how their teams work, their needs and how privacy compliance can be operationalized into their processes.
• Develop and implement strategies to ensure ongoing compliance with privacy program objectives
• Address stakeholder issues, while minimizing friction and maximizing productivity and impact.
• Partner with privacy workstreams to mature the privacy posture of the company
• Develop and deliver compliance training programs
• Support regulatory compliance efforts including controls testing, certifications, risk assessments, oversight and governance, external assessor coordination, control design, continuous monitoring, issue management and remediation.

Minimum Qualifications:

• 8+ years of experience in strategy, management consulting, audit, business operations, regulatory operations, or other operational discipline
• 3+ years of experience working within a technical product environment and partnering with cross-functional stakeholders, including legal, policy and product functions
• 2+ years of experience working in a regulatory domain like privacy, integrity, security OR in a role associated with data protection, regulatory response, operational risk management, compliance, audit and implementation of control frameworks, privacy by design, information security, or other highly regulated environment
• Proven project management, problem solving, time-management and organizational skills, and the experience to set key priorities combined with a demonstrated history of delivering operational results
• Demonstrated knowledge of a domain's requirements (e.g. Privacy, Integrity, Security), applicable to a global tech company, and experience evaluating products or processes to ensure compliance with applicable requirements
• Demonstrated experience orienting towards solutions in the context of competing perspectives

Preferred Qualifications:

• Bachelor's or Master's degree in a related discipline or equivalent practical experience
• Experience communicating complex concepts and developing communications for a wide variety of both technical and non-technical audiences
• Experience in process design and process improvement in end-to-end product lifecycle coordination
• Compliance Certifications (CCEP, CISSP, CRCM)

About Meta: