Program Manager, Privacy Risk Assessment
meta platformsEdison (NJ)
Program Manager, Privacy Risk Assessment
Posted today
meta platformsEdison (NJ)
SENIORITY
Manager
About the role
Program Manager, Privacy Risk Assessment Meta's Privacy Risk Assessment team plays a critical role in evaluating privacy risks across a wide range of initiatives, including product launches, partnerships, data integrations, and corporate transactions. In this role, you will lead privacy risk assessments across diverse workstreams, identifying data protection risks, evaluating privacy posture, and partnering with Legal, Policy, Engineering, and cross-functional teams to drive risk mitigation strategies. You will operate with a high degree of independence, exercising judgment across complex, time-sensitive initiatives where privacy risk intersects with regulatory compliance, product development, and business strategy.
Responsibilities:
Lead end-to-end privacy risk assessments across product launches, partnerships, data integrations, and corporate transactions, evaluating data practices, consent frameworks, data retention policies, and regulatory compliance posture Identify, document, and communicate privacy risks associated with proposed initiatives, including risks related to data transfers, third-party sharing, sensitive data categories, and cross-border data flows Develop and maintain structured privacy risk assessment frameworks and playbooks tailored to different initiative types and risk profiles Partner with Legal, Policy, Engineering, and Product teams to ensure that privacy risk findings are integrated into decision-making, product design, and implementation planning Advise cross-functional partners on complex privacy matters, translating regulatory requirements and privacy principles into actionable guidance Track and manage privacy risk remediation commitments across active initiatives, ensuring timely follow-through and appropriate documentation Contribute to team-level goals by helping to define short, mid, and long-term priorities for the privacy risk assessment program Engage leaders and cross-functional stakeholders to build alignment on privacy risk findings and support informed decision-making Help Meta meet its legal and regulatory obligations by ensuring that initiatives are evaluated against applicable data protection laws, including GDPR, CCPA, and other global privacy frameworks
Qualifications:
- 6+ years of experience in privacy program management, privacy compliance, risk management, or a related field with direct exposure to data protection or regulatory compliance
- Experience conducting privacy risk assessments, compliance reviews, or due diligence across product launches, partnerships, or corporate transactions
- Experience analyzing data practices, data flows, and privacy controls across complex technical environments and translating findings into structured risk assessments
- Experience working cross-functionally with Legal, Engineering, and Policy stakeholders to drive risk mitigation and decision-making in ambiguous, time-sensitive contexts
- Familiarity with global privacy regulations and frameworks, including GDPR, CCPA, or equivalent data protection laws
- Bachelor's Degree or equivalent experience Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
- Experience managing privacy risk assessments at a technology company, law firm, or consulting firm across diverse initiative types
- Experience using AI tools or automation to improve risk assessment workflows, documentation quality, or operational efficiency
- Familiarity with privacy-by-design principles and experience evaluating privacy controls in consumer-facing technology products or platforms
- Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
- Relevant privacy certifications such as CIPP, CIPM, or CIPTDemonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.