Program Manager, Privacy Risk Assessment
$122,000 - $180,000 per year
Apply (opens in a new tab)Program Manager, Privacy Risk Assessment
Posted today
SENIORITY
Manager
SALARY
$122,000 - $180,000 per year
About the role
- Program Manager, Privacy Risk Assessment Responsibilities:
- Lead end-to-end privacy risk assessments across product launches, partnerships, data integrations, and corporate transactions, evaluating data practices, consent frameworks, data retention policies, and regulatory compliance posture
- Identify, document, and communicate privacy risks associated with proposed initiatives, including risks related to data transfers, third-party sharing, sensitive data categories, and cross-border data flows
- Develop and maintain structured privacy risk assessment frameworks and playbooks tailored to different initiative types and risk profiles
- Partner with Legal, Policy, Engineering, and Product teams to ensure that privacy risk findings are integrated into decision-making, product design, and implementation planning
- Advise cross-functional partners on complex privacy matters, translating regulatory requirements and privacy principles into actionable guidance
- Track and manage privacy risk remediation commitments across active initiatives, ensuring timely follow-through and appropriate documentation
- Contribute to team-level goals by helping to define short, mid, and long-term priorities for the privacy risk assessment program
- Engage leaders and cross-functional stakeholders to build alignment on privacy risk findings and support informed decision-making
- Help Meta meet its legal and regulatory obligations by ensuring that initiatives are evaluated against applicable data protection laws, including GDPR, CCPA, and other global privacy frameworks
- 6+ years of experience in privacy program management, privacy compliance, risk management, or a related field with direct exposure to data protection or regulatory compliance
- Experience conducting privacy risk assessments, compliance reviews, or due diligence across product launches, partnerships, or corporate transactions
- Experience analyzing data practices, data flows, and privacy controls across complex technical environments and translating findings into structured risk assessments
- Experience working cross-functionally with Legal, Engineering, and Policy stakeholders to drive risk mitigation and decision-making in ambiguous, time-sensitive contexts
- Familiarity with global privacy regulations and frameworks, including GDPR, CCPA, or equivalent data protection laws
- Bachelor's Degree or equivalent experience
- Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
- Experience managing privacy risk assessments at a technology company, law firm, or consulting firm across diverse initiative types
- Experience using AI tools or automation to improve risk assessment workflows, documentation quality, or operational efficiency
- Familiarity with privacy-by-design principles and experience evaluating privacy controls in consumer-facing technology products or platforms
- Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
- Relevant privacy certifications such as CIPP, CIPM, or CIPTDemonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
- Public Compensation:$122,000/year to $180,000/year + bonus + equity + benefits
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
