Program Manager, Privacy Risk Assessment

Meta's Privacy Risk Assessment team plays a critical role in evaluating privacy risks across a wide range of initiatives, including product launches, partnerships, data integrations, and corporate transactions. In this role, you will lead privacy risk assessments across diverse workstreams, identifying data protection risks, evaluating privacy posture, and partnering with Legal, Policy, Engineering, and cross-functional teams to drive risk mitigation strategies. You will operate with a high degree of independence, exercising judgment across complex, time-sensitive initiatives where privacy risk intersects with regulatory compliance, product development, and business strategy.

Responsibilities

Lead end-to-end privacy risk assessments across product launches, partnerships, data integrations, and corporate transactions, evaluating data practices, consent frameworks, data retention policies, and regulatory compliance posture
Identify, document, and communicate privacy risks associated with proposed initiatives, including risks related to data transfers, third-party sharing, sensitive data categories, and cross-border data flows
Develop and maintain structured privacy risk assessment frameworks and playbooks tailored to different initiative types and risk profiles
Partner with Legal, Policy, Engineering, and Product teams to ensure that privacy risk findings are integrated into decision-making, product design, and implementation planning
Advise cross-functional partners on complex privacy matters, translating regulatory requirements and privacy principles into actionable guidance
Track and manage privacy risk remediation commitments across active initiatives, ensuring timely follow-through and appropriate documentation
Contribute to team-level goals by helping to define short, mid, and long-term priorities for the privacy risk assessment program
Engage leaders and cross-functional stakeholders to build alignment on privacy risk findings and support informed decision-making
Help Meta meet its legal and regulatory obligations by ensuring that initiatives are evaluated against applicable data protection laws, including GDPR, CCPA, and other global privacy frameworks

Qualifications

6+ years of experience in privacy program management, privacy compliance, risk management, or a related field with direct exposure to data protection or regulatory compliance
Experience conducting privacy risk assessments, compliance reviews, or due diligence across product launches, partnerships, or corporate transactions
Experience analyzing data practices, data flows, and privacy controls across complex technical environments and translating findings into structured risk assessments
Experience working cross-functionally with Legal, Engineering, and Policy stakeholders to drive risk mitigation and decision-making in ambiguous, time-sensitive contexts
Familiarity with global privacy regulations and frameworks, including GDPR, CCPA, or equivalent data protection laws
Bachelor's Degree or equivalent experience Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
Experience managing privacy risk assessments at a technology company, law firm, or consulting firm across diverse initiative types
Experience using AI tools or automation to improve risk assessment workflows, documentation quality, or operational efficiency
Familiarity with privacy-by-design principles and experience evaluating privacy controls in consumer-facing technology products or platforms
Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
Relevant privacy certifications such as CIPP, CIPM, or CIPT
Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)