Job Description

Every day, people come to Meta to connect with friends and family, discover what's going on in the world, interact with businesses, find potential customers, and build community. Meta's Global Operations exists to support them. The Risk, Monitoring and Controls (RMC) team makes risk management operational and ensures Meta is protected from compliance and/or audit risks by implementing, overseeing, and enhancing internal and external controls for the purpose of identifying and mitigating risk. The team also protects user personal data through vetting and periodic developer reviews in order to detect apps that are not compliant with our platform policies.

RMC designs and runs the processes, protocols, and monitoring that allow operational teams to execute their controls reliably, evidence them credibly, and surface issues early. We are not the risk assessors or policy setters; we are the team that makes risk management workable in the day-to-day.

We're looking for someone who can translate risk and control frameworks into practical operating routines that operations teams will actually use, and who understands where first-line accountability ends and second-line oversight begins. Depending on audit outcomes, we may take a variety of actions; everything from implementing management action plans, which set requirements for remediation of identified risks and control gaps, to working with cross-functional teams to implement systems and/or engineering fixes, which ensure that the backend infrastructure is operating as intended. We are committed to protecting users' personal information and improving the overall platform experience.

Responsibilities

Design, document, and operate risk management processes and protocols that support broader operations teams' control execution routines, monitoring cadences, evidence standards, escalation paths, and issue intake

• Partner with process owners to translate second line risk requirements and control expectations into concrete, executable operating procedures without re-performing second line assessment, challenge, or independent assurance activities
• Run control monitoring and testing in support of first line self-assessment, including sampling, quality review, and evidence readiness for internal audit and second line review
• Identify friction and failure patterns in operational controls and drive process redesign or automation to reduce manual burden and error rates
• Serve as the connective tissue between operations teams, second line risk and compliance functions, Legal, and audit routing questions to the right owner and keeping handoffs clean
• Manage and maintain the compliance monitoring programs and periodic testing procedures, including planning, reviewing, evaluating risks, identifying improvements to existing controls, and maintaining applicable documentation for the compliance program
• Independently manage and perform compliance reviews and audits of Legal and Compliance Operations' internal business processes and perform compliance reviews of third-party developers while adhering to an established audit cadence
• Conduct process walkthroughs with external regulators / auditors and provide requisite populations of data, sample documentation, and other necessary information
• Build and maintain working relationships with internal cross-functional areas. As a trusted advisor to various business units, maintain current knowledge of the evolving Audit and Compliance business model, processes, systems, and associated controls; propose and influence positive change in these areas
• Draft, monitor, and escalate Management Action Plans for open compliance findings through resolution. Prepare reports for management on the results and performance of the compliance program. Make recommendations to improve processes, lessen risks to the business, and improve future audit results
• Liaise with Product Counsel on developments in applicable regulations and policies that could impact the business, including industry best practices related to consumer privacy protection and data security

Qualifications

Experience conducting recurring internal control audits to identify potential violations of our policies

• Experience communicating and presenting audit findings, control assessments, and compliance recommendations to technical and non-technical audiences, including executives (e.g., written reports, stakeholder briefings, executive summaries)
• 4+ years of experience in project management within audit, compliance, or risk management functions
• Ability to work with cross-functional teams (e.g., Legal, Engineering, and other investigation teams)
• Experience managing, influencing, and driving strategic solutions across multiple teams, including technical teams
• Experience scoping and delivering projects where requirements, stakeholders, or processes are not yet fully defined
• 4+ years of analytical and problem-solving experience in audit, compliance, or risk management
• Experience with automation deployment and understanding of automation technologies Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
• Experience conducting internal or external audits of operational controls, compliance programs, or regulatory requirements
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
• Developer experience or familiarity with Meta's developer platform products (e.g., Graph API, Meta Login, Meta Business SDK)
• Experience in public relations, legal support, or policy creation
• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)