Exam & Audit — Integrity Program Manager

Meta's RCP function enables the company to build products that withstand regulatory scrutiny and to meet global content and platform-accountability obligations at scale.

Within RCP, the Integrity Examinations & Audit (E&A) team owns Meta's readiness for, and execution of, external audit engagements — including the independent audit required under the EU Digital Services Act (DSA), youth and teen safety examinations, and other integrity-related audits and regulatory examinations.

We are seeking an Integrity Program Manager to own one or more integrity audit subject matter areas within E&A.

Depending on portfolio needs, subject matter may include minor protection and youth safety, transparency and enforcement reporting, terms and conditions and user-facing disclosures, researcher and regulator data access, voluntary commitments and codes of practice, content moderation and enforcement operations, and the integrity metrics underpinning regulatory claims.

In this role you will serve as the E&A subject matter expert for your assigned area, translate regulatory obligations into testable controls, prepare control owners for audit testing, and act as the responsible face to external auditors, regulators, and independent assessors. You will be the connection point between E&A, first-line integrity teams, Legal, Policy, Data Science, and Meta's Regulatory Offices.

The ideal candidate is an experienced trust & safety, integrity, or compliance professional who is fluent in both integrity subject matter and the mechanics of control design and testing.

You should be comfortable with ambiguity, able to manage competing priorities to meet audit-driven deadlines, and able to translate between compliance auditors and the integrity teams whose systems, processes, and metrics are under examination.

Responsibilities

• Serve as the E&A subject matter expert for assigned integrity audit subject matter, supporting DSA, youth safety, and other integrity-related audits, examinations, and assurance engagements
• Own end-to-end execution of audit and examination activities for your subject matter, including scoping, evidence planning, control walkthroughs, auditor requests, and remediation tracking
• Serve as the responsible point of contact with external auditors, regulators, and independent assessors, representing control owners in auditor interactions and walkthroughs as needed, and acting as the escalation point during fieldwork
• Partner with first-line control owners across integrity, youth safety, product, operations, and data teams to design, document, and evaluate controls that evidence compliance with applicable obligations
• Develop and maintain the control frameworks governing your subject matter — control objectives, testing methodologies, evidence standards, and review and sign-off gates — including controls over the production of externally published figures where applicable
• Assess control design and operating effectiveness in advance of external testing; identify design gaps, evidence gaps, methodology risks, and testing risks, and drive them to closure ahead of fieldwork
• Assess whether integrity metrics used to demonstrate regulatory compliance are fit for purpose — verifying that metric definitions, populations, calculation logic, and data lineage support the claims made from them, and identifying where they do not
• Translate regulatory and policy requirements into actionable control specifications, testing procedures, and evidence expectations for first-line, technical, and operational teams
• Coordinate evidence gathering across first-line teams, Data Science, and other RCP teams — scoping requests, sequencing production, and validating that deliverables satisfy auditor expectations
• Prepare control owners for auditor engagement, including walkthrough readiness, control narrative development, methodology explanation, and evidence packaging
• Develop and maintain audit-related infrastructure and artifacts for your pillar, including control frameworks, evidence repositories, RACI and operating models, and issue and remediation registers
• Manage responses to auditor and regulator requests for information, ensuring submissions are accurate, complete, timely, and appropriately archived in accordance with internal standards
• Maintain an in-depth understanding of the evolving integrity regulatory landscape across jurisdictions — including platform accountability, minor protection and age assurance, transparency reporting, and data access expectations — and translate changes into actionable program work and control framework updates
• Define, monitor, and report key metrics that give leadership ongoing visibility into control health, evidence readiness, and remediation progress; identify deviations and drive corrective action
• Drive remediation of findings and issues, tracking management action plans through to closure with accountable owners
• Establish streamlined communication and engagement models across E&A, RCP, Legal, Policy, and first-line teams to keep stakeholders aligned and deliverables on time
• Produce written analyses, risk assessments, readiness reporting, and recommendations for senior leadership and cross-functional partners; create and facilitate presentations that support decision-making
• Identify gaps in strategy, systems, and processes, and drive scalable improvements that support repeatable annual audit cycles
• Represent your subject matter in cross-organizational initiatives, providing subject matter expertise
• Provide mentorship and guidance to team members
• Support business travel on an as-needed basis (up to 10%)

Qualifications

• 6+ years of experience in risk management, trust and safety, compliance, program management, or a related field
• Experience identifying, assessing, and mitigating operational or product risks within complex, cross-functional environments
• Experience applying data analysis and systematic problem-solving to evaluate risk impact and inform decision-making under ambiguity
• Experience communicating risk findings and recommendations in writing to both technical and non-technical stakeholders, including leadership
• Experience managing multiple concurrent workstreams by prioritizing based on impact, urgency, and stakeholder needs Experience using data tools or dashboards to monitor risk signals, track program health, and surface actionable insights
• Experience working within product development lifecycles to integrate risk review processes at early stages of product planning
• Experience leveraging AI tools to improve the efficiency, accuracy, or scalability of risk assessment or response workflows
• Experience designing or iterating on risk frameworks, response playbooks, or escalation processes in a technology or platform environment
• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies