Program Manager, People Risk & Assurance

Meta is seeking a program manager to support our people data risk assessment and review program involving HR, employment and data privacy risks related to People Data at Meta. Meta People Group strives to run a great business and ensure that we comply with our regulatory and compliance obligations.

The Program Manager, People Risk & Assurance will join the team to work across our key partners to lead risk initiatives to scale our global program. Specifically, the Program Manager, People Risk & Assurance will be responsible for driving and delivering end-to-end assessments of employment and privacy risk in new and novel use cases impacting People Risk.

Responsibilities

Execute comprehensive risk assessments for employment and people data privacy risks for projects and products involving people data at the company
Contribute to the ongoing design and maturity of our operations to reinforce industry-leading second line of defense employment privacy risk assessment
Collaborate with key Legal, Privacy and HR business program and product owners to build understanding and thought partnership for people data risks, including consulting on longer-term product strategy of the teams and respective leadership
Manage cross-functional dependencies, risks, and changes effectively by optimizing scope, schedule, and resources accordingly
Drive internal and external process improvements across multiple teams and functions, including reducing the manual efforts through automation
Anticipate bottlenecks, provide escalation management, and ensure people compliance is not compromised
Manage relationships both internal and external to the Meta People organization
Communicate clearly and build alignment with stakeholders across teams to drive program outcomes, and collaborate proactively with cross-functional partners to resolve blockers and advance program goals
Identify, assess, and remediate people data risk issues by analyzing data, coordinating with stakeholders, and implementing mitigation plans

Qualifications

8+ years of experience in implementing and supporting a comprehensive risk assessment program involving security, privacy, and/or employment compliance
6+ years of experience leading key projects or initiatives in a scaled, cross-functional program involving sensitive or regulated data
Experience conducting or overseeing privacy risk assessments or data protection impact assessments for enterprise or HR data systems
Experience partnering with Legal, Employment Law, or HR functions to navigate complex data privacy requirements
Experience in developing and implementing scalable governance frameworks, policies, or processes for sensitive data handling
Experience with or demonstrated ability to ramp quickly on employment laws, regulations, industry guidance, and company compliance policies the content and requirements of various employment laws, regulations, industry guidance, and company compliance policies
Experience maintaining open, candid, and trusting work relationships with both product and engineering teams and with legal partners Experience with global employee data privacy regulations such as GDPR, CCPA, or equivalent frameworks governing workforce data
Experience working directly with people analytics, HR technology, or workforce intelligence platforms to assess data flows and privacy controls
Demonstrated skills in using AI tools, applications, or skills to monitor and inform operational health and business priorities
Relevant privacy certifications such as CIPP/E, CIPP/US, or CIPM
Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
Technical background including depth and breadth of knowledge of AI systems, infrastructure or products
Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
Demonstrated ability to translate ambiguous regulatory or policy requirements into structured program deliverables and measurable outcomes
Advanced degree in AI or security