Audit and Compliance Manager

Every day, people come to Meta to connect with friends and family, discover what's going on in the world, interact with businesses, find potential customers, and build community. Meta's Global Operations exists to support them. The Risk, Monitoring and Controls (RMC) team makes risk management operational and ensures Meta is protected from compliance and/or audit risks by implementing, overseeing, and enhancing internal and external controls for the purpose of identifying and mitigating risk. The team also protects user personal data through vetting and periodic developer reviews in order to detect apps that are not compliant with our platform policies.

RMC designs and runs the processes, protocols, and monitoring that allow operational teams to execute their controls reliably, evidence them credibly, and surface issues early. We are not the risk assessors or policy setters; we are the team that makes risk management workable in the day-to-day.

We're looking for someone who can translate risk and control frameworks into practical operating routines that operations teams will actually use, and who understands where first-line accountability ends and second-line oversight begins. Depending on audit outcomes, we may take a variety of actions; everything from implementing management action plans, which set requirements for remediation of identified risks and control gaps, to working with cross-functional teams to implement systems and/or engineering fixes, which ensure that the backend infrastructure is operating as intended. We are committed to protecting users' personal information and improving the overall platform experience.