Director, Compliance & Assurance

Director, Compliance & Assurance

Meta's Regulatory Compliance Programs (RCP) is the central engine driving risk management and compliance at the company, supporting Meta and the family of apps. We're seeking experienced GRC, Trust & Safety or Security Leaders to help enable and safeguard Meta's products and services, which have a truly global scale, by upholding existing Content Regulation requirements and meeting emergent compliance obligations. Regulatory Compliance is responsible for, (a) enabling the business to achieve its goals at scale and pace;

(b) safeguarding the business against real world security risks; and (c) addressing the regulatory scrutiny the business faces. Our goal is to make Meta the premier place to work for governance, risk, compliance, and Integrity professionals.

The Director of Compliance & Assurance leads a high-impact org through rapid scaling, owning critical capabilities & driving compliance strategy with Product & Engineering Leaders. Key strategic mandates include New Product Compliance for AI and product launches, accelerated mitigations for New Obligations and establishing integrated reporting to drive executive decision-making.

A Leader who is a trusted advisor to senior engineering leaders, Board committees, and represents Meta with global regulators.

The ideal candidate excels at navigating ambiguity, framing evolving problem spaces, and driving strategic alignment across technical and executive stakeholders.

Drive the strategy, operating model, and execution of Meta's Compliance & Assurance Programs priorities, including New Product Compliance, Compliance Effectiveness and multi-disciplined team.

Partner with Central Product Leads to enable risk reducing measures (integrated monitoring, reporting & oversight).

Embed compliance evaluations into early-stage product life cycles— enabling early mitigation and accelerated/safe launches.

Scales compliance effectiveness using AI to deliver monitoring, oversight, artefacts & org-wide continuous improvement.

Maintain an in-depth understanding of the broad regulatory landscape impacting Meta across Integrity, Youth, Privacy & Security, with the ability to design compliance strategy/priorities.

Represent Meta's compliance posture to Leaders, Board, Committees, Regulators, and external auditors, serving as the final escalation point for risk-acceptance decisions.

Communicate complex and technical conceptions effectively (right altitude & medium) per the audience (Eng, Product, Legal) to enable cross-functional alignment & decisions.

Identification of critical gaps/risks in strategy, product or positions, and designing strategic mitigations to resolve.

Establish end-to-end AI risk assessment capabilities—defining methodologies, tiering, and operational protocols for predicate, model, and rapid assessments in close collaboration with AI Infra, Product, and Legal.

Lead cross-domain alignment across Privacy, Integrity, Legal, Compliance, and Internal Audit to implement oversight models.

Manage program financials, budgeting, and resourcing while driving AI and automation initiatives to scale assessment capacity without compromising defensibility.

15+ years of experience leading security, technology risk, GRC, or trust & safety functions

8+ years of experience managing and developing teams, including experience managing managers or senior individual contributors with demonstrated progression into organizational leadership

Experience developing talent & leaders, managing org health through growth or change

Experience partnering with / influencing executives leadership to shape organizational strategy, influence priorities, driving XFN alignment

Experience partnering directly with a Product, Infrastructure or Engineering organizations as a tech risk or second-line of defense

Bachelor's degree or practical experience equivalent to higher education coursework

Experience delivering assurance or reporting against external regulatory or certification regimes (e.g., EU/Global regulatory frameworks, SOC 2, HIPAA, FDA, US Government requirements) Advanced degree and/or relevant professional certifications

Knowledge of global content regulations, content moderation, and trust & safety best practises

5+ years of experience working in regulated industries or security

Experience working in Tech, and using AI tools to improve workflows, strengthen controls and enable compliance