Meta's Internal Audit team is seeking an experienced audit professional to lead product risk and compliance audit engagements across Meta's portfolio of consumer and enterprise products. In this role, you will evaluate the design and effectiveness of controls governing product development lifecycles, regulatory compliance obligations, privacy frameworks, and risk management practices embedded within Meta's product organizations. You will partner with cross-functional stakeholders across product, legal, privacy, and compliance teams to provide independent assurance and drive meaningful improvements to how Meta manages product-related risks at scale. You will be successful in this role if you can run AI-assisted audit engagements and have the ability to leverage data analytics and AI-integrated workflows to enhance audit coverage, improve testing efficiency, and surface risk signals across large product datasets.
Responsibilities
Lead end-to-end AI-assisted product risk and compliance audit engagements, including scoping, risk assessment, fieldwork, and reporting across Meta's product portfolio
• Develop and execute audit test plans that evaluate controls over product development processes, regulatory compliance obligations, and product governance frameworks
• Apply critical thinking, data analytics and AI-assisted audit techniques to evaluate evidence, identify root causes, assess risk levels, and recommend control enhancements or process improvements
• Identify and evaluate emerging product risks, including risks arising from AI-integrated product features, algorithmic systems, and new product launches. Assess AI system controls to manage personal data, purpose limitation, data minimization, consent and legal basis, cross-border transfer, retention etc
• Review system documentation, AI platform configuration, model documentation, data flows, policies, procedures, control evidence, monitoring reports, and technical artifacts to identify risks and control gaps
• Collaborate with product, legal, privacy, and policy teams to align audit findings with business context and drive actionable management responses
• Present audit observations, risk themes, and recommendations to executive and senior leadership stakeholders in clear, audience-appropriate formats
• Contribute to the development of the annual product risk audit plan by identifying high-risk product areas and compliance gaps that warrant independent review
• Monitor remediation of audit findings and management action plans related to product compliance commitments
• Leverage data analytics and AI-integrated workflows to enhance audit coverage, improve testing efficiency, and surface risk signals across large product datasets
• Build and maintain trusted relationships with product and compliance stakeholders to position Internal Audit as a valued risk and control advisor
• Effectively manage relationships with Internal Audit co-sourcing partners to ensure seamless execution as one team
Minimum Qualifications
• 8+ years of audit, compliance, or risk management experience, including experience conducting audits of product risk, regulatory compliance, or technology governance at a Big 4 firm or large internal audit function
• Bachelor's degree in Management Information Systems, Accounting, Business, Computer Science, Engineering, Data Science, or a related field
• Experience in designing and executing risk-based audit programs that assess controls over product development, compliance obligations, or data governance frameworks
• Experience communicating audit findings and risk assessments in writing to technical and non-technical stakeholders, including executive leadership
• Experience leading cross-functional audit engagements and managing work streams across multiple concurrent projects with competing priorities
• Experience applying data analytics techniques to audit testing, risk identification, or control evaluation
• Demonstrated background in both operational and compliance audits that include one or more of the following: technology, cybersecurity, resiliency, third-party risk management, payment compliance, and privacy
• Demonstrated experience leading small audit teams
Preferred Qualifications
• Demonstrated ability to integrate AI tools to redesign audit workflows and deliver measurable improvements in audit quality or efficiency, including experience with responsible and ethical AI practices
• Experience auditing consumer technology companies, platform businesses, or organizations subject to complex product-related regulatory requirements such as privacy, content, or consumer protection regulations
• Experience leveraging data analytics and artificial intelligence to streamline audit execution
• Experience building and maintaining partnerships with cross-functional stakeholders to align on audit outcomes and drive actionable improvements
• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
• Exposure to cybersecurity frameworks such as ISO 27001/27002/NIST, AI auditing or regulatory frameworks or agile auditing practices
• Experience in navigating and influencing within highly matrixed organizations, collaborating across departments
• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy review)
• Familiarity with privacy compliance frameworks, AI governance practices, or product accountability programs relevant to large-scale consumer products
• Expertise in auditing AI, technology, complex data pipelines, and advanced computing systems
• At least one relevant professional certification, such as CIA, CISA, CIPP, AIGP, or CCEP
• Functional knowledge of AI (traditional and generative AI), data science, engineering systems, or emerging technologies
• Experience auditing within technology companies or in complex IT environments
