Internal Audit Manager, Product Risk Compliance

Lead end-to-end AI-assisted product risk and compliance audit engagements, including scoping, risk assessment, fieldwork, and reporting across Meta's product portfolio

Develop and execute audit test plans that evaluate controls over product development processes, regulatory compliance obligations, and product governance frameworks

Apply critical thinking, data analytics and AI-assisted audit techniques to evaluate evidence, identify root causes, assess risk levels, and recommend control enhancements or process improvements

Identify and evaluate emerging product risks, including risks arising from AI-integrated product features, algorithmic systems, and new product launches. Assess AI system controls to manage personal data, purpose limitation, data minimization, consent and legal basis, cross-border transfer, retention etc

Review system documentation, AI platform configuration, model documentation, data flows, policies, procedures, control evidence, monitoring reports, and technical artifacts to identify risks and control gaps

Collaborate with product, legal, privacy, and policy teams to align audit findings with business context and drive actionable management responses

Present audit observations, risk themes, and recommendations to executive and senior leadership stakeholders in clear, audience-appropriate formats

Contribute to the development of the annual product risk audit plan by identifying high-risk product areas and compliance gaps that warrant independent review

Monitor remediation of audit findings and management action plans related to product compliance commitments

Leverage data analytics and AI-integrated workflows to enhance audit coverage, improve testing efficiency, and surface risk signals across large product datasets

Build and maintain trusted relationships with product and compliance stakeholders to position Internal Audit as a valued risk and control advisor

Effectively manage relationships with Internal Audit co-sourcing partners to ensure seamless execution as one team

8+ years of audit, compliance, or risk management experience, including experience conducting audits of product risk, regulatory compliance, or technology governance at a Big 4 firm or large internal audit function

Bachelor’s degree in Management Information Systems, Accounting, Business, Computer Science, Engineering, Data Science, or a related field

Experience in designing and executing risk-based audit programs that assess controls over product development, compliance obligations, or data governance frameworks

Experience communicating audit findings and risk assessments in writing to technical and non-technical stakeholders, including executive leadership

Experience leading cross-functional audit engagements and managing work streams across multiple concurrent projects with competing priorities

Experience applying data analytics techniques to audit testing, risk identification, or control evaluation

Demonstrated background in both operational and compliance audits that include one or more of the following: technology, cybersecurity, resiliency, third-party risk management, payment compliance, and privacy

Demonstrated experience leading small audit teams

Demonstrated ability to integrate AI tools to redesign audit workflows and deliver measurable improvements in audit quality or efficiency, including experience with responsible and ethical AI practices

Experience auditing consumer technology companies, platform businesses, or organizations subject to complex product-related regulatory requirements such as privacy, content, or consumer protection regulations

Experience leveraging data analytics and artificial intelligence to streamline audit execution

Experience building and maintaining partnerships with cross-functional stakeholders to align on audit outcomes and drive actionable improvements

Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies

Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)

Exposure to cybersecurity frameworks such as ISO 27001/27002/NIST, AI auditing or regulatory frameworks or agile auditing practices

Experience in navigating and influencing within highly matrixed organizations, collaborating across departments

Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)

Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy review)

Familiarity with privacy compliance frameworks, AI governance practices, or product accountability programs relevant to large-scale consumer products

Expertise in auditing AI, technology, complex data pipelines, and advanced computing systems

At least one relevant professional certification, such as CIA, CISA, CIPP, AIGP, or CCEP

Functional knowledge of AI (traditional and generative AI), data science, engineering systems, or emerging technologies

Experience auditing within technology companies or in complex IT environments