Director, Compliance & Assurance

Meta's Regulatory Compliance Programs (RCP) is the central engine driving risk management and compliance at the company, supporting Meta and the family of apps. We’re seeking experienced GRC, Trust & Safety or Security Leaders to help enable and safeguard Meta’s products and services, which have a truly global scale, by upholding existing Content Regulation requirements and meeting emergent compliance obligations. Regulatory Compliance is responsible for, (a) enabling the business to achieve its goals at scale and pace; (b) safeguarding the business against real world security risks; and (c) addressing the regulatory scrutiny the business faces. Our goal is to make Meta the premier place to work for governance, risk, compliance, and Integrity professionals. The Director of Compliance & Assurance leads a high-impact org through rapid scaling, owning critical capabilities & driving compliance strategy with Product & Engineering Leaders. Key strategic mandates include New Product Compliance for AI and product launches, accelerated mitigations for New Obligations and establishing integrated reporting to drive executive decision-making. A Leader who is a trusted advisor to senior engineering leaders, Board committees, and represents Meta with global regulators. The ideal candidate excels at navigating ambiguity, framing evolving problem spaces, and driving strategic alignment across technical and executive stakeholders.

Responsibilities

• Drive the strategy, operating model, and execution of Meta's Compliance & Assurance Programs priorities, including New Product Compliance, Compliance Effectiveness and multi-disciplined team.
• Partner with Central Product Leads to enable risk reducing measures (integrated monitoring, reporting & oversight).
• Embed compliance evaluations into early-stage product lifecycles— enabling early mitigation and accelerated/safelaunches.
• Scales compliance effectiveness using AI to deliver monitoring, oversight, artefacts & org-wide continuous improvement.
• Maintain an in-depth understanding of the broad regulatory landscape impacting Meta across Integrity, Youth, Privacy & Security, with the ability to design compliance strategy/priorities.
• Represent Meta’s compliance posture to Leaders, Board, Committees, Regulators, and external auditors, serving as the final escalation point for risk-acceptance decisions.
• Communicate complex and technical conceptions effectively (right altitude & medium) per the audience (Eng, Product, Legal) to enable cross-functional alignment & decisions.
• Identification of critical gaps/risks in strategy, product or positions, and designing strategic mitigations to resolve.
• Establish end-to-end AI risk assessment capabilities—defining methodologies, tiering, and operational protocols for predicate, model, and rapid assessments in close collaboration with AI Infra, Product, and Legal.
• Lead cross-domain alignment across Privacy, Integrity, Legal, Compliance, and Internal Audit to implement oversight models.
• Manage program financials, budgeting, and resourcing while driving AI and automation initiatives to scale assessment capacity without compromising defensibility.

Minimum Qualifications

• 15+ years of experience leading security, technology risk, GRC, or trust & safety functions
• related discipline
• 8+ years of experience managing and developing teams, including experience managing managers or senior individual contributors with demonstrated progression into organizational leadership
• Experience developing talent & leaders, managing org health through growth or change
• Experience partnering with / influencing executives leadership to shape organizational strategy, influence priorities, driving XFN alignment
• Experience partnering directly with a Product, Infrastructure or Engineering organizations as a tech risk or second-line of defense
• Bachelor's degree or practical experience equivalent to higher education coursework
• Experience delivering assurance or reporting against external regulatory or certification regimes (e.g., EU/Global regulatory frameworks, SOC 2, HIPAA, FDA, US Government requirements) Advanced degree and/or relevant professional certifications
• Knowledge of global content regulations, content moderation, and trust & safety best practises
• 5+ years of experience working in regulated industries or security
• Experience working in Tech, and using AI tools to improve workflows, strengthen controls and enable compliance