Program Manager, People Risk & Assurance

Meta is seeking a program manager to support our people data risk assessment and review program involving HR, employment and data privacy risks related to People Data at Meta. Meta People Group strives to run a great business and ensure that we comply with our regulatory and compliance obligations. The People Data Review Program Manager will join the People Risk and Compliance (PR&C) team to work across our key partners to lead risk initiatives to scale our global program. Specifically, the People Data Review Program Manager will be responsible for driving and delivering end-to-end assessments of employment and privacy risk in new and novel use cases impacting People Data. Responsibilities
Execute comprehensive risk assessments for employment and people data privacy risks for projects and products involving people data at the company Contribute to the ongoing design and maturity of our operations to reinforce industry-leading second line of defense employment privacy risk assessment Collaborate with key Legal, Privacy and HR business program and product owners to build understanding and thought partnership for people data risks, including consulting on longer-term product strategy of the teams and respective leadership Manage cross-functional dependencies, risks, and changes effectively by optimizing scope, schedule, and resources accordingly Drive internal and external process improvements across multiple teams and functions, including reducing the manual efforts through automation Anticipate bottlenecks, provide escalation management, and ensure people compliance is not compromised Manage relationships both internal and external to the Meta People organization Communicate clearly and build alignment with stakeholders across teams to drive program outcomes, and team player attitude with a bias to action Identify, assess, and remediate people data risk issues by analyzing data, coordinating with stakeholders, and implementing mitigation plans Minimum Qualifications
8+ years of experience in implementing and supporting a comprehensive risk assessment program involving security, privacy, and/or employment compliance 8+ years of experience leading key projects or initiatives in a scaled, cross-functional program involving sensitive or regulated data Experience conducting or overseeing privacy risk assessments or data protection impact assessments for workforce or HR data systems Experience partnering with Legal, Employment Law, or HR functions to navigate complex data privacy requirements Experience in developing and implementing scalable governance frameworks, policies, or processes for sensitive data handling Have working knowledge or the willingness to quickly learn the content and requirements of various employment laws, regulations, industry guidance, and company compliance policies Experience maintaining open, candid, and trusting work relationships with both product and engineering teams and with legal partners Demonstrated skills in using AI tools, applications, or skills to monitor and inform operational health and business priorities Advanced degree in AI or security Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements) Technical background including depth and breadth of knowledge of AI systems, infrastructure or products Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies Relevant privacy certifications such as CIPP/E, CIPP/US, or CIPM Experience working directly with people analytics, HR technology, or workforce intelligence platforms to assess data flows and privacy controls Demonstrated ability to translate ambiguous regulatory or policy requirements into structured program deliverables and measurable outcomes Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews) Experience with global employee data privacy regulations such as GDPR, CCPA, or equivalent frameworks governing workforce data