
Governance Risk & Control Manager
Required skills
- ITGC
- SOX readiness
- access control
- change management
- data quality
- system-enforced controls
- preventive controls
- risk sensing
- continuous controls monitoring
- root cause analysis
Nice to have
- responsible AI
- ethical AI
- bias mitigation
- quality and accuracy reviews
- scaling governance
- compliance function
Role summary
Meta is seeking a Governance Risk & Control Manager for its Finance Governance Center of Excellence. This role focuses on enabling Finance to scale with technology and AI investments while maintaining a strong control environment. You will lead a team of risk and controls professionals, partnering with stakeholders to assess and mitigate systems and process risks, with a focus on ITGCs, SOX readiness, access control, and change management. The role involves overseeing automated controls in financial platforms, ensuring compliance with AI governance frameworks, and translating technical findings for leadership. This is a leadership position with hands-on expectations, requiring team development and involvement in complex assessments.
Responsibilities
- Manage, coach, and develop a team of risk and controls professionals by setting clear priorities, allocating risk-based coverage, holding a consistent quality bar, and growing people to cover more than one domain
- Own team's health and hiring: diagnose issues early from feedback, engagement, and delivery signals; recruit, interview, and onboard strong talent
- Stay hands-on in the most complex and ambiguous assessments, modeling the technical depth expected of the team
- Lead ITGC and end-to-end SOX readiness assessments, including access and segregation of duties, change management, job monitoring, and data quality
- Assess the control impact of new systems, migrations, automation, and AI-enabled workflows, and design mitigating controls that are system-enforced and preventive wherever possible
- Facilitate walkthroughs and technical deep-dives, producing data flow diagrams and system architectures views that surface key process and system risks
- Build data-driven risk sensing and continuous controls monitoring to provide continuous assurance that our controls are operating effectively at all times
- Translate technical findings into clear risk, root cause, and impact narratives for senior finance and cross-functional leadership, and drive remediation to closure
- Educate Finance and Enterprise Products stakeholders on governance requirements and drive consistent application across a diverse portfolio of initiatives, building the enablement assets that make compliance self-service where possible — playbooks, standards, guidance, and training
- Contribute to Meta's Finance AI governance work as a subject matter partner and represent the CoE in cross-functional governance forums
Minimum Qualifications
- 8+ years of experience in IT/systems risk management, IT or internal audit, SOX compliance, or risk advisory, including integrated (process and system) audits
- Experience managing and developing a team of risk, audit, or business systems professionals across multiple concurrent work streams, or demonstrated experience leading engagement teams and formally developing others
- Demonstrated ability to identify risks and design, implement, and test controls to meet compliance requirements, with emphasis on control design and advisory rather than testing alone
- Working proficiency with SOX 404, COSO, COBIT, ITGC, and IT security and risk management standards
- Experience assessing risk in financial systems (ERP packages such as Oracle, SAP, and/or homegrown platforms), including data flows, integrations, and automated controls
- Understanding of core finance business processes (e.g., source-to-pay, order-to-cash, month-end close, payroll, treasury) and how system risks affect them
- Experience communicating risk and technical trade-offs in writing and in person to technical and non-technical audiences, including senior leadership
- Experience operating in an environment with ambiguity and no existing playbook in a fast-moving, cross-functional environment
- Bachelor's degree in Accounting, Management Information Systems, Computer Science, or a directly related field, or equivalent practical experience
Preferred Qualifications
- Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
- Experience scaling a governance or compliance function, including building training and enablement for non-specialist stakeholders
- Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
- Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
- Experience with SQL and data visualization tools (Tableau, Power BI, etc.) for risk sensing and continuous monitoring
- CPA, CIA, CISA, or CRISC
- Experience in Big Four public accounting and in-house at a high-tech or platform company
- Experience applying governance or control requirements to AI/ML, generative AI, or automation in a financial or regulated context
- Proficiency in executing both business process and system risk assessments
$152,000/year to $214,000/year + bonus + equity + benefits
Similar roles
Director, Policy Communications — WhatsAppMeta · Washington, DC · Onsite
Finance and Business Operations Manager, MarketingMeta · Menlo Park, CA · Onsite
Senior Risk Control Consultant - MiningAon Corporation · Vancouver, BC · Hybrid
Risk Control ConsultantAMERIND · Albuquerque, NM · Onsite
Risk Control Consultant - MissouriAcuity Insurance · Springfield, MO · Onsite
Senior Risk Control ConsultantGallagher Bassett · Woodland Hills, CA · Hybrid
