Global Operations at Meta works with a network of vendor partners around the world to deliver the operations that keep our platforms safe and our users supported. We are looking for an experienced security leader to lead the strategy that protects Meta's data, systems and users across that vendor workforce, spanning security, contractual compliance and incident response. The role leads security strategy across the many teams involved, with solutions designed to scale and hold as operations change. Much of its impact comes through influence: building the case for security priorities with partner teams and executive leaders, using evidence and business impact, including with product, engineering and the operations teams that own workflows. The right person has built and run a security, risk or compliance function before and leads alongside an experienced risk and compliance team. They are a trusted advisor to executive leaders, translating security risk into clear business decisions.
Responsibilities
Lead and evolve a multi-year security strategy for Global Operations' vendor workforce, prioritized by risk and business impact, and the skills and roles the function needs as it grows
• Represent Global Operations with Security, Legal, Privacy and vendor executive leadership, framing risk and driving decisions on trade-offs
• Lead cross-functional security governance, including the executive review cadence, that gives leaders a holistic, data-informed view of cumulative risk, informs launch decisions and keeps accountability for risk acceptance and mitigation clear
• Direct the design of durable, scalable controls across identity and access, tooling, data protection, devices and physical environments, while responding quickly as new risks emerge
• Evolve the security standards vendors are held to, making sure assurance outcomes drive continuous improvement
• Partner with Security, Threat Intelligence and Legal to lead the strategy for incident preparedness, response and insider risk, using data to identify emerging threats so teams can continuously evolve their playbooks
• Champion security in how operations run, how workflows and tools are designed and launched, workforce model and site decisions, and security awareness across the vendor workforce and operations teams
• Anticipate emerging risk, including from AI tools used by vendors and workers, and apply automation and AI to advance how controls are monitored
• Lead and evolve how risk exposure, incident impact and mitigation effectiveness are measured, guiding leadership decisions on investment across tooling, process and vendor strategy
• Grow security expertise across the team and partner organizations through mentoring and shared practices
Minimum Qualifications
• 15+ years in information security, risk management or compliance, including leading large cross-functional security or risk programs
• Experience building and evolving a security, risk or compliance function in a large, fast-moving organization, including strategy, governance, controls, assurance and reporting
• Experience in third-party or vendor risk management, including outsourced or contingent workforce environments
• Working knowledge across identity and access management, endpoint and device security, data protection, physical security, incident management and insider risk
• Experience building risk measurement and reporting across multiple data sources to inform executive decisions
• Experience advising and influencing VP and C-suite stakeholders with data-driven recommendations, and leading teams to outcomes without direct authority
• Experience working across regions and time zones with globally distributed teams and partners
Preferred Qualifications
• Experience using automation or AI for continuous control monitoring and assurance
• Experience in financial services, payments, large-scale outsourced operations or trust and safety
• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
• Experience working with threat intelligence or investigations teams
• Experience with AI governance and responsible AI practices, including assessing risk in AI-enabled tools
• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
• Experience managing people and growing teams
• Experience managing legal, regulatory or media escalations arising from security incidents
