Meta Hiring For ISSO GRC Risk Management Intelligence Lead at United States Full Time

Summary:

We are creating an operationally effective and highly efficient “service of common concern” for all Integrity, Security, Support, and Operations (ISSO) Governance, Risk, and Compliance (GRC) needs, ensuring Integrity, Security, Support, and Operations continue to meet global regulatory requirements and manage risk.Meta’s ISSO GRC is the central engine driving risk management and compliance at the company, supporting Meta and the family of apps. We’re seeking deeply experienced, integrity and security leadership professionals to help enable and safeguard Meta’s products and services which have a truly global scale. ISSO GRC is simultaneously responsible for, (a) enabling the business to achieve its goals at scale and pace, (b) safeguarding the business against real world integrity and security risks, and (c) addressing the regulatory scrutiny the business faces. Our goal is to make Meta the premier place to work for governance, risk, compliance, security, and integrity professionals. The ISSO GRC Risk Management Intelligence Lead leads the risk intelligence program within the Risk Management subpillar for Meta’s ISSO risk domains. This role serves as a management leader in ISSO GRC, and leads the Risk Management Intelligence team within the broader ISSO GRC organization. This role ensures an effective and efficient Risk Management Intelligence program that complements the standards based risk management framework, to include standards based capability maturity and effectiveness, and risk quantification; transparently risk informs all business decisioning; enhances the centralized, comprehensive risk register based on one corporate tooling standard; and supports predicate-based risk assessments. This role serves as a strategic partner to a wide collection of cross-functional partners to include, but not limited to, business leaders, product and engineering leads, regional leadership, legal, corporate compliance, etc. in the implementation and execution of Meta’s risk domain programs. This role proactively drives alignment between business unit objectives and corporate strategy. As a business enabler, this role helps ensure the business is well risk managed, that business decisions adhere to corporate policies and are implemented with risks and risk signals as top of mind, while being mindful to the practicalities of speed, agility, and business results. Based on strategic risk domain needs, this role has strong influence over the delivery and priority of service features and development of new services and products, with a focus on continuous improvement of the risk domain culture, process, and technology.

Required Skills:

ISSO GRC Risk Management Intelligence Lead Responsibilities:

1. Lead Risk Management Intelligence program within Risk Management subpillar of ISSO GRC for Meta’s ISSO risk domains.

2. Serve as a management leader in ISSO GRC, and lead the relevant program teams within the broader ISSO GRC Risk Management organization.

3. Develop, document, and operate a risk intelligence program, complementary to Meta Integrity, Information Security, and Integrated Risk Management, that accounts for risk quantification, standards (e.g., NIST CSF) based capability maturity and effectiveness and measurement and monitoring of controls effectiveness and broader risk signals.

4. Support reporting with intelligence and insights into, and evidence of, emerging ISSO risks.

5. Design, establishment, and tracking of KPIs and KRIs against risk appetite statements.

6. Provide consideration, and guidance on regulatory matters and mitigate against uncertainty.

7. Ensure adherence to defined standards in order for Meta to maintain legal and regulatory compliance.

8. Support independent testing of Meta controls, and an Integrated Risk Management (IRM) Interface to improve the organizations risk posture.

9. Identify risk domain specific risks and determine safeguards to reduce an incident’s probability of occurrence and impact.

10. Establish a system of indicators for Meta to evaluate overall current risk at a glance for executive review and decision making.

11. Facilitating effective risk domain management and evaluating Meta risk domain governance controls for Meta infrastructure that Meta relies on.

Minimum Qualifications:

Minimum Qualifications:

12. Bachelor’s Degree in technical or business discipline or related experience.

13. 13+ years related experience with 7+ years in management or equivalent leadership roles with organization-wide impact.

14. Demonstrated real world, hands on risk intelligence, risk management, and or business process design and implementation experience.

15. Familiarity with integrity and security precepts, practices, and solutions.

16. In depth knowledge of technology concepts, strategies and methodologies and their application to business opportunities.

17. Advanced knowledge of management concepts, practices, and techniques.

18. Strategy, vision, and direction development.

19. Experience identifying gaps in strategy, systems, and processes to support growth at scale.

20. Interpersonal skills with the experience to effectively influence others, goals, and strategy across the company.

21. Experience to build collaborative working relationships with a broad range of global stakeholders.

22. Familiarity with appropriate compliance frameworks and regulatory requirements (e.g., EECC, ePD, NISD, GDPR, NIST, DSA, OSA and other relevant anticipated integrity and security regulations), coupled with successful implementation of these to move a risk program forward.

Preferred Qualifications:

Preferred Qualifications:

23. Direct experience leading GRC, or similar organizations.

24. Responsibility of designing and managing risk intelligence functions, risk and control self-assessments, defining and tracking KPIs, risk quantification framework, exceptions process, as well as independent control testing, and standards compliance.

25. Applicable U.S. national intelligence and national security experience.

26. An Advanced Degree in technical or business discipline preferred.

Public Compensation:

$173,000/year to $247,000/year + bonus + equity + benefits

Industry: Internet

Equal Opportunity:

Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.

Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at [email protected].