Technical Program Manager, Security

The Security, Risk & Assurance (SRA) team proactively identifies, assesses, and mitigates security, risk, and compliance challenges across Security, Integrity, Investigations (SI2) personnel, tools, operations, and vendors. Our mission is to ensure the integrity, privacy, and resilience of systems and processes, ultimately increasing user safety and legal compliance. The broader SI2 organization is responsible for the compliance, operation, and counsel of Meta's high-severity harms and legal obligations.

Meta is seeking to hire a Security Technical Program Manager. This individual contributor role provides dedicated technical program management to execute and scale security initiatives within the legal compliance technical ecosystem. This role balances competing priorities across cross-functional partners and escalates conflicts to leadership when needed. The role emphasizes protecting user data, implementing technical controls, and managing Information Security Risk to prevent fraud and abuse.

Responsibilities

• Program Execution: Own delivery of assigned security programs within the SRA framework (Identify, Prevent, Detect, Respond and Recover), with a focus on Meta's legal investigations, operations, and compliance technical ecosystem
• Fraud and Abuse Prevention: Drive technical projects that prevent and reduce fraud and abuse in Meta's Intake and Disclosure programs, such as Requestor and Recipient Verification (RRV). Work with engineering on detections and signals, and bring threat intelligence into project plans
• Information Security Risk Management and Controls: Run assigned parts of the risk management lifecycle. Work with engineering and security experts to document and test critical security controls and track fixes across SI2 surfaces
• Incident Management: Manage technical and fraud incidents and issues to resolution through the SEV process, coordinating with engineering, security, and legal teams
• Process Improvement: Improve the processes behind your programs so they stay efficient, scalable, and reliable
• Security Assessments: Coordinate and track security assessments, vulnerability testing, and mitigation plans to close identified technical vulnerabilities
• Stakeholder Engagement: Work with Legal, GRC, Engineering, and Operations on security, risk, and compliance requirements. Prepare program updates for leadership

Minimum qualifications

• 8+ years of experience in program or project management in a technical or security domain
• Bachelor's degree in Computer Science, Engineering, Information Technology, or equivalent technical experience
• Working knowledge of security technologies, compliance frameworks, and risk management principles
• Experience managing technical incidents and issue resolution workflows
• Experience communicating between technical and non-technical audiences and working across teams

Preferred qualifications

• Experience working directly with engineering and legal teams to implement technical security controls
• Professional certifications such as CISSP, CISM, CRISC, CompTIA CySA+, or Certified Fraud Examiner
• Working knowledge of security frameworks (for example NIST, ISO 27001, COBIT) and experience supporting audit or risk assessment readiness
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
• Experience delivering technical solutions for fraud or abuse prevention, including work with detection engineering, security signals, or threat intelligence
• Experience in roles such as Security Delivery Manager, Security Officer, or Threat Intelligence Program Manager