Security Program Manager, Exam and Audit

Responsibilities

• Define and own the long‑term strategy for Meta's security examination and audit compliance programs, including scope, methodology, and governance frameworks.
• Lead cross‑functional coordination across security engineering, legal, privacy, and policy teams to prepare for and respond to regulatory examinations and third‑party security audits.
• Drive audit readiness programs by identifying control gaps, assessing risk exposure, and partnering with technical teams to implement remediation plans.
• Establish metrics, reporting cadences, and executive‑level communications to convey audit status, findings, and program health to senior leadership.
• Serve as the primary point of contact for external auditors and regulatory examiners, managing evidence collection, inquiry responses, and audit lifecycle coordination.
• Identify systemic compliance risks across Meta's security posture and develop scalable program interventions to address them proactively.
• Influence the design of security controls and engineering processes to embed compliance requirements into product and infrastructure development lifecycles.
• Build and refine program management tooling, workflows, and documentation standards to improve audit efficiency and repeatability across the organization.
• Mentor other program managers and compliance professionals, establishing best practices and elevating the overall maturity of the security compliance function.

Minimum Qualifications

• 8+ years of experience in security compliance, audit management, or regulatory examination programs within a technology or enterprise environment.
• Experience leading end‑to‑end security audit or examination programs, including evidence management, control testing, and findings remediation at organizational scale.
• Experience applying security compliance frameworks such as ISO 27001, SOC 2, NIST CSF, FedRAMP, or equivalent regulatory standards to large‑scale technical environments.
• Experience communicating complex compliance and security risk topics in writing to technical teams and non‑technical executive stakeholders.
• Experience driving cross‑functional alignment across security, legal, engineering, and policy organizations on compliance program strategy and execution.

Preferred Qualifications

• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies.
• Familiarity with security control automation, continuous compliance monitoring tools, or GRC platforms used to scale audit evidence collection.
• Experience building or maturing a security compliance function from early‑stage program design through full operational deployment.
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements).
• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews).
• Professional certifications such as CISA, CISSP, CISM, or equivalent security and audit credentials.
• Experience managing security compliance programs in a global technology company subject to multiple concurrent regulatory frameworks and jurisdictions.

About Meta

Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today-beyond the constraints of screens, the limits of distance, and even the rules of physics.

Equal Employment Opportunity

Meta is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics.