Meta
Program Manager, Privacy Risk Assessment
$122K–$180K
Menlo Park, CA +1 · Manager · Full-time · Posted Sep 3, 2026
- Location
- Menlo Park, CA
New York, NY - Experience
- 6+ years in privacy program management, privacy compliance, risk management, or a related field with direct exposure to data protection or regulatory compliance.
- Education
- Bachelor's Degree or equivalent experience
About the job
Leads privacy risk assessments for product launches, partnerships, data integrations, and corporate transactions, and works with cross-functional teams to mitigate risks and support informed decisions.
What you'll do
- Conduct and document privacy risk assessments, including reviews of data practices, consent, retention, data transfers, and regulatory compliance.
- Develop assessment frameworks and playbooks, and track remediation commitments.
- Advise and partner with Legal, Policy, Engineering, and Product teams to integrate privacy findings into decisions and implementation.
What they ask for
- Experience conducting privacy risk assessments, compliance reviews, or due diligence across products, partnerships, or transactions.
- Experience analyzing data practices, data flows, and privacy controls in complex technical environments.
- Cross-functional experience driving risk mitigation and decisions with Legal, Engineering, and Policy stakeholders.
- Familiarity with global privacy regulations and frameworks, including GDPR and CCPA, or equivalent data protection laws.
Nice to have
- Experience managing privacy risk assessments at a technology company, law firm, or consulting firm.
- Privacy certifications such as CIPP, CIPM, or CIPT.
Pay
$122,000/year to $180,000/year (base salary); bonus and equity amounts not stated.
Tools
GDPR, CCPA
AI focus
Ongoing AI skill development and use of AI tools or automation to improve assessment workflows, documentation, and efficiency; apply responsible AI practices, including risk assessment, bias mitigation, and quality and accuracy reviews.
Model-written summary · the original posting is authoritative