Meta
Program Manager, Security Risk Program
$153K–$209K
Menlo Park, CA +3 · Manager · Full-time · Posted Sep 3, 2026
- Location
- Menlo Park, CA
Seattle, WA
Washington, DC
New York, NY - Experience
- 8+ years in a relevant discipline; 3+ years of program management experience in a corporate environment; also asks for 3+ years working in a corporate environment subject to audit against federal or industry-wide regulations.
- Education
- Advanced degree and/or relevant certification (CISSP, CRISC, CISM, CISA) is listed as a qualification; no education requirement is stated.
About the job
Build and scale Meta’s AI product launch security risk assessment capability, coordinating cross-functional reviews and reporting risk to leadership and regulators.
What you'll do
- Design the assessment framework, methodology, operating model, and launch outputs, scaling delivery to 20+ assessments per quarter by H1 2027.
- Coordinate Security, product, Privacy, Integrity, and Legal partners; support launch teams and negotiate assessment scope and remediation commitments.
- Maintain an AI risk register and executive reporting, and define tooling requirements for AI-enabled assessment automation.
What they ask for
- 8+ years of experience in governance, risk, and compliance, security risk management, regulatory compliance, or a directly related discipline.
- 3+ years of program management experience in a corporate environment.
- Experience designing a program or process from the ground up and driving cross-functional alignment without direct authority.
- Experience assessing or managing AI/ML risk or familiarity with AI-specific frameworks, and embedding risk, security, or compliance review in product launches.
Nice to have
- Advanced degree and/or relevant certification (CISSP, CRISC, CISM, CISA).
- Experience defining tooling requirements or applying automation and AI to scale GRC operations.
Pay
$153,000/year to $209,000/year USD base salary; bonus and equity amounts are not stated.
Tools
AI, EU AI Act, NIST AI RMF, CISSP, CRISC, CISM, CISA
AI focus
Assess security risks of AI product launches, maintain portfolio-level AI risk reporting, and drive AI-enabled automation across the assessment lifecycle; the posting also calls for responsible AI practices and use of AI tools to improve workflows.
Model-written summary · the original posting is authoritative