Skip to content

Open nowFirst seen 1 hour ago

Compliance Assurance Program Manager

Meta1,307 open roles

Pay
$118,000 – $173,000 a year
Where
Menlo Park, CA; Seattle, WA; Washington, DC; New York, NY
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowCompliance Assurance Program ManagerMeta · Menlo Park, CA; Seattle, WA; Washington, DC; New York, NY
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Meta's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.3% of postings close within 7 days. Measured by our own scanner across the market. Meta postings stay open a median of 34 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.3%7 days
  4. 21.3%14 days
  5. 35.7%30 days
  6. 59.1%60 days
This job: first seen 1 hour ago

Meta median: 34 days open

The posting

The global privacy regulatory landscape is not static, and the product and technical landscape at Meta changes multiple times daily to continue to meet and meet the needs of our more than 3.5 billion daily users on our platform. The Compliance Assurance Program Manager (CAPM) works at the center of privacy regulation, legal, business, product, and engineering to put our users' privacy at the center of everything we do.

The Exam & Audit (E&A) team, part of Meta's Regulatory Compliance Program (RCP), manages Meta's regulatory examination and audit engagements. E&A connects internal stakeholders with external assessors and regulators. Its work includes delivering external assessor testing on time and at quality, defending the program's position on findings, and driving remediation of identified gaps. As the second line of defense, E&A also gives compliance advice and independent oversight of Meta's privacy safeguards. It challenges their design and effectiveness so that compliance becomes a catalyst for trusted, responsible product growth rather than a constraint.

This role sits in the Third Party Risk Management (TPRM) domain. TPRM covers the safeguards that govern how third parties (developers, partners, vendors and service providers) access, use and protect Meta user data. The CAPM will be the second-line partner for these safeguards and will lead their readiness for independent assessment.

We are looking for an individual contributor who brings audit, risk, and privacy expertise to serve as a trusted second-line advisor and assessment lead for third-party safeguards. As well as an individual contributor who tackles privacy complexities head-on, to help design and build an comprehensive privacy compliance program, while keeping our users and their privacy at the forefront of everything that we do.

Responsibilities

  • Serve as the second-line compliance partner for TPRM safeguards across the whole third-party lifecycle: onboarding and due diligence, contract and platform terms, data access and API permissions, ongoing monitoring, enforcement, and offboarding and data deletion
  • Lead FTC Consent Order Assessment readiness for assigned TPRM safeguards: coordinate assessor requests, review populations, samples and evidence, and own response narratives through to delivery
  • Support Meta's commitment to protect users' privacy by enabling and advising privacy domains to navigate the complex landscape of global and data privacy regulations
  • Advise on how new third-party integrations and platform capabilities affect Meta's privacy posture, and safeguards/controls
  • Provide independent oversight to proactively identify issues, ensure visibility, and help prioritize remediation efforts within assigned safeguards/domains, acting as a key escalation point and advocate for risk mitigation
  • Develop long-term objectives of how we will evolve our privacy program operating model with well-documented roadmaps, goals, and objectives while delivering on immediate priorities

Minimum Qualifications

  • 5+ years of experience in Governance, Risk, and Compliance (GRC), internal or external audit, or risk management, including third-party or vendor risk management, data privacy, or security
  • 2+ years of experience delivering technical programs or products from inception to delivery across organizations
  • Working knowledge of privacy regulations (e.g., GDPR, CCPA) and third-party risk frameworks or standards (e.g., NIST, ISO 27001/27036, SOC 2)
  • Experience testing or assessing controls (design and operating effectiveness) and preparing evidence for regulators or external auditors
  • Prior experience working with program management either directly in product or engineering coupled with ITGC experience

Preferred Qualifications

  • Experience using AI or automation to scale compliance testing, evidence review, and/or reporting
  • Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
  • Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
  • Experience designing, operating, or assessing platform safeguards or API governance controls, such as developer access permissions and scopes, app review, data-use restrictions, rate limiting, or monitoring third-party data access
  • Experience with regulatory consent orders or decrees (e.g., FTC Consent Order), especially provisions covering third parties
  • Experience designing, implementing, and maintaining scalable global compliance operations
  • Experience managing and directing contingent workers and contractors who specialize in privacy and security program management
  • Design thinking process improvement experience leveraging creativity and structure to solve complex problems while putting the user first
  • Experience in a leadership capacity influencing stakeholders and engineers
  • Experience working in a technical environment and prior cross-group collaboration experience
  • Bachelor's or Master's degree in a related discipline or equivalent practical experience
  • Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)

US: $118,000/year to $173,000/year + bonus + equity

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Meta's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Meta's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Meta's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.